Lucene search

IBM39CDFEE714A8311672A6C37357676657FB319639AD396ACD05E5594EEF98BF97

HistoryJul 21, 2022 - 10:50 a.m.

Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2022-22477)

2022-07-2110:50:10

www.ibm.com

ibm

websphere application server

intelligent operations center

cve-2022-22477

security bulletin

cross-site scripting

version 8.5

version 9.0

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

26.9%

JSON

Summary

IBM WebSphere® Application Server is shipped with IBM® Intelligent Operations Center. Information about a security vulnerability affecting IBM WebSphere® Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s)	Version(s)
Intelligent Operations Center (IOC) V1.5.0, V1.5.0.1, V1.5.0.2, V1.6.0, V1.6.0.1, V1.6.0.2, V1.6.0.3, V5.1.0, V5.1.0.1, V5.1.0.2, V5.1.0.3, V5.1.0.4, V5.1.0.5, V5.1.0.6, V5.1.0.7, V5.1.0.8, V5.1.0.9, V5.1.0.10, V5.1.0.11, V5.1.0.12, V5.1.0.13, V5.1.0.14, V5.2.0, V5.2.1 and V5.2.2	WebSphere Application server version 8.5 and 9.0.

Remediation/Fixes

Download the correct version of the fix from the following link: Security Bulletin: IBM WebSphere Application Server is vulnerable to Cross-site Scripting (CVE-2022-22477 ) . Installation instructions for the fix are included in the readme document that is in the fix package.

Workarounds and Mitigations

None

Affected configurations

Vulners

Node

ibmintelligent_operations_center_for_emergency_managementMatch1.6

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.1

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.2

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.3

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.4

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.5

ibmintelligent_operations_center_for_emergency_managementMatch5.1.0.6

ibmintelligent_operations_centerMatch1.5.0

ibmintelligent_operations_centerMatch1.5.0.1

ibmintelligent_operations_centerMatch1.5.0.2

ibmintelligent_operations_centerMatch1.6.0

ibmintelligent_operations_centerMatch1.6.0.1

ibmintelligent_operations_centerMatch1.6.0.2

ibmintelligent_operations_centerMatch1.6.0.3

ibmintelligent_operations_centerMatch5.1.0

ibmintelligent_operations_centerMatch5.1.0.1

ibmintelligent_operations_centerMatch5.1.0.2

ibmintelligent_operations_centerMatch5.1.0.3

ibmintelligent_operations_centerMatch5.1.0.4

ibmintelligent_operations_centerMatch5.1.0.5

ibmintelligent_operations_centerMatch5.1.0.6

ibmintelligent_operations_centerMatch5.1.0.7

ibmintelligent_operations_centerMatch5.1.0.8

ibmintelligent_operations_centerMatch5.1.0.9

ibmintelligent_operations_centerMatch5.1.0.10

ibmintelligent_operations_centerMatch5.1.0.11

ibmintelligent_operations_centerMatch5.1.0.12

ibmintelligent_operations_centerMatch5.1.0.13

ibmintelligent_operations_centerMatch5.1.0.14

ibmintelligent_operations_centerMatch5.2.0

ibmintelligent_operations_centerMatch5.2.1

ibmwater_operations_for_waternamicsMatch5.1

ibmwater_operations_for_waternamicsMatch5.2.0

ibmwater_operations_for_waternamicsMatch5.2.0.1

ibmwater_operations_for_waternamicsMatch5.2.0.2

ibmwater_operations_for_waternamicsMatch5.2.0.3

ibmwater_operations_for_waternamicsMatch5.2.0.4

ibmwater_operations_for_waternamicsMatch5.2.0.5

ibmwater_operations_for_waternamicsMatch5.2.0.6

ibmwater_operations_for_waternamicsMatch5.2.1

ibmwater_operations_for_waternamicsMatch5.2.1.1

CPENameOperatorVersion
ibm intelligent operations center for emergency managementeq1.6
ibm intelligent operations center for emergency managementeq5.1.0
ibm intelligent operations center for emergency managementeq5.1.0.1
ibm intelligent operations center for emergency managementeq5.1.0.2
ibm intelligent operations center for emergency managementeq5.1.0.3
ibm intelligent operations center for emergency managementeq5.1.0.4
ibm intelligent operations center for emergency managementeq5.1.0.5
ibm intelligent operations center for emergency managementeq5.1.0.6
ibm intelligent operations centereq1.5.0
ibm intelligent operations centereq1.5.0.1

Name	Operator	Version
ibm intelligent operations center for emergency management	eq	1.6
ibm intelligent operations center for emergency management	eq	5.1.0
ibm intelligent operations center for emergency management	eq	5.1.0.1
ibm intelligent operations center for emergency management	eq	5.1.0.2
ibm intelligent operations center for emergency management	eq	5.1.0.3
ibm intelligent operations center for emergency management	eq	5.1.0.4
ibm intelligent operations center for emergency management	eq	5.1.0.5
ibm intelligent operations center for emergency management	eq	5.1.0.6
ibm intelligent operations center	eq	1.5.0
ibm intelligent operations center	eq	1.5.0.1