Lucene search
IBM41AAC16DD55649610A7533A1CCFF752B9439D695AF4B531F93AD71CE90511A9BHistoryJun 02, 2021 - 9:54 p.m.
Security Bulletin: Multiple vulnerabilities in Apache HttpComponents and HttpCommons affect WebSphere Application Server, which is shipped as part of IBM Cloud Pak for Applications (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)
2021-06-0221:54:02
www.ibm.com
11
EPSS
0.033
Percentile
91.3%
Summary
Multiple vulnerabilities in Apache HttpComponents and HttpCommons affect WebSphere Application Server (CVE-2015-5262, CVE-2014-3577, CVE-2012-6153, CVE-2011-1498)
Vulnerability Details
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Affected Products and Versions
| Principal Product(s) and Version(s) | Affected Supporting Product(s) and Version(s) |
|---|---|
| IBM Cloud Pak for Applications, all |
WebSphere Application Server
- 9
- 8.5
- 8
Remediation/Fixes
Workarounds and Mitigations
None
Related
nessus
nessus
IBM WebSphere Application Server 8.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.20 / 9.0.x < 9.0.5.8 Multiple Vulnerabilities
2021-05-20 00:00:00
Ubuntu 14.04 LTS : Apache Commons HttpClient vulnerabilities (USN-2769-1)
2015-10-15 00:00:00
RHEL 5 / 6 : JBoss EAP (RHSA-2014:1834)
2014-11-12 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2769-1)
2015-10-15 00:00:00
RedHat Update for jakarta-commons-httpclient RHSA-2014:1166-01
2014-09-09 00:00:00
CentOS Update for jakarta-commons-httpclient CESA-2014:1166 centos7
2014-09-10 00:00:00
ubuntu
ubuntu
Apache Commons HttpClient vulnerabilities
2015-10-14 00:00:00
securityvulns
securityvulns
[USN-2769-1] Apache Commons HttpClient
2015-10-25 00:00:00
CVE-2014-3577: Apache HttpComponents client: Hostname verification susceptible to MITM attack
2014-08-18 00:00:00
Apache Commons HttpClient DoS
2015-10-25 00:00:00
redhat
redhat
freebsd
freebsd
Axis2 -- Security vulnerabilities on dependency Apache HttpClient
2012-12-06 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: httpcomponents-client-4.2.5-4.fc20
2014-08-30 03:58:27
[SECURITY] Fedora 19 Update: httpcomponents-client-4.2.5-4.fc19
2014-08-30 03:57:30
[SECURITY] Fedora 19 Update: jakarta-commons-httpclient-3.1-15.fc19
2014-08-27 01:28:57
suse
suse
Security update for apache-commons-httpclient (important)
2020-11-08 00:00:00
Security update for apache-commons-httpclient (important)
2020-11-07 00:00:00
mageia
mageia
f5
f5
SOL15364328 - Apache vulnerabilities CVE-2012-5783, CVE-2012-6153, and CVE-2014-3577
2016-02-02 00:00:00
K15737 : Apache vulnerability CVE-2014-3577
2014-10-23 00:00:00
SOL15737 - Apache vulnerability CVE-2014-3577
2014-10-23 00:00:00
debian
debian
[SECURITY] [DLA 222-1] commons-httpclient security update
2015-05-19 15:18:39
[SECURITY] [DLA 322-1] commons-httpclient security update
2015-10-01 08:24:15
amazon
amazon
Important: jakarta-commons-httpclient
2014-09-17 21:47:00
ubuntucve
ubuntucve
osv
osv
commons-httpclient - security update
2015-05-19 00:00:00
Denial of service vulnerability in org.apache.httpcomponents:httpclient
2018-10-17 00:05:29
photon
photon
Moderate Photon OS Security Update - PHSA-2020-0141
2020-09-17 00:00:00
Moderate Photon OS Security Update - PHSA-2020-3.0-0141
2020-09-17 00:00:00
debiancve
debiancve
cve
cve
github
github
cvelist
cvelist
prion
prion
Authorization
2011-07-07 21:55:00
Design/Logic Flaw
2015-10-27 16:59:00
Design/Logic Flaw
2014-08-21 14:55:00
nvd
nvd
centos
centos
jakarta security update
2014-09-08 16:54:16
httpcomponents security update
2014-09-03 23:09:02
veracode
veracode
Improper Certificate Common Name Verification Allows Spoofing SSL Servers
2019-01-15 09:00:42
oraclelinux
oraclelinux
httpcomponents-client security update
2014-09-03 00:00:00
jakarta-commons-httpclient security update
2014-09-08 00:00:00
EPSS
0.033
Percentile
91.3%
Related for 41AAC16DD55649610A7533A1CCFF752B9439D695AF4B531F93AD71CE90511A9B