EUVD-2024-41293

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

IBM WebSphere Application Server 8.5 and 9.0 has a stored cross-site scripting vulnerability.

Reporter	Title	Published	Views	Family All 26
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2024-45071)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Business Monitor	20 Nov 202414:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM WebSphere Hybrid Edition, is vulnerable to stored cross-site scripting (CVE-2024-45071)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli System Automation Application Manager (CVE-2024-45071)	21 Oct 202407:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM WebSphere Application Server affect IBM Cloud Pak System	10 Jun 202508:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server is vulnerable to stored cross-site scripting (CVE-2024-45071)	23 Oct 202419:14	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server CVE-2024-45071	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server, which is bundled with IBM Cloud Pak for Applications, is vulnerable to stored cross-site scripting (CVE-2024-45071)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM DevOps Code ClearCase (CVE-2024-35154, CVE-2024-45071, CVE-2024-35153)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is used by IBM Rational ClearQuest (CVE-2024-45071)	28 Jan 202522:08	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "07d263f1-705d-388b-8bae-44431db8ef0b",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f5b53c85-94a2-3bd1-b502-9b3cb60ed585",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5, 9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/7173270

03 Oct 2025 20:07Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.14.8 - 5.5

EPSS0.00302

SSVC