Lucene search
+L

2031 matches found

Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.4 views

PT-2025-33106 · Ibm · Ibm Websphere Application Server Liberty

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty affected versions not specified Description: IBM WebSphere Application Server Liberty is susceptible to a denial of service condition. Recommendations: At the moment, there is no information about a...

7.5CVSS6.2AI score0.00451EPSS
SaveExploits0References7
NVD
NVD
added 2025/08/12 8:15 p.m.4 views

CVE-2025-36000

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.8CVSS0.00177EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/12 8:15 p.m.2 views

CVE-2025-36000

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.8CVSS6.2AI score0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 7:39 p.m.2 views

CVE-2025-36000 IBM WebSphere Application Server Liberty cross-site scripting

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.4CVSS6.3AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/12 7:39 p.m.5 views

CVE-2025-36000 IBM WebSphere Application Server Liberty cross-site scripting

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.4CVSS0.00177EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/12 7:39 p.m.37 views

CVE-2025-36000

CVE-2025-36000 affects IBM WebSphere Application Server Liberty. The Connected IBM bulletin confirms Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting, allowing a privileged user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a...

4.8CVSS6.3AI score0.00177EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2025/08/12 7:15 p.m.4 views

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/12 7:15 p.m.6 views

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS0.00395EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 6:45 p.m.4 views

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

5.9CVSS7.1AI score0.00395EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/12 6:45 p.m.39 views

CVE-2025-36124

CVE-2025-36124 is described by IBM security bulletins as a vulnerability in IBM WebSphere Liberty/Liberty-based IBM products where a remote attacker could bypass security restrictions due to JMS messaging configuration not being honored. Connected IBM bulletins show affected products/versions and...

7.5CVSS7.1AI score0.00395EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/08/12 6:45 p.m.12 views

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

5.9CVSS0.00395EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/12 3:18 p.m.8 views

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details CVEID:CVE-2025-36000 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to stored cross-site scripting. This...

4.8CVSS6AI score0.00177EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.4 views

PT-2025-32879 · Ibm · Ibm Websphere Application Server Liberty

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS7.2AI score0.00395EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.6 views

IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server Liberty is a Java application server from International Business Machines IBM built on top of the Open Liberty project. A security vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, which stems from a failure to...

7.5CVSS4.2AI score0.00395EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/08/12 12:0 a.m.3 views

IBM WebSphere Application Server Liberty 跨站脚本漏洞

IBM WebSphere Application Server Liberty is a lightweight Java application server from IBM for rapid development and deployment of cloud-native applications. A stored cross-site scripting XSS vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, whic...

4.8CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/12 12:0 a.m.7 views

PT-2025-32887

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8 Description: IBM WebSphere Application Server Liberty is susceptible to stored cross-site scripting. A privileged user can embed arbitrary JavaScript code into the We...

4.8CVSS5.5AI score0.00177EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/08/09 4:26 p.m.3 views

CVE-2024-56339

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass security restrictions caused by a failure to honor security configuration...

7.5CVSS9.5AI score0.004EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/07 4:15 p.m.2 views

CVE-2024-56339

IBM WebSphere Application Server 9.0 and WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.7 could allow a remote attacker to bypass security restrictions caused by a failure to honor security configuration...

7.5CVSS7.3AI score0.004EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/07 12:0 a.m.4 views

IBM WebSphere Application Server(WAS)和IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server WAS and IBM WebSphere Application Server Liberty are both products of International Business Machines IBM.IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for...

7.5CVSS6AI score0.004EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/08/06 5:12 p.m.4 views

Security Bulletin: Multiple security vulnerabilities in WebSphere Liberty may affect IBM Business Automation Workflow - CVE-2025-25193, CVE-2025-23184

Summary IBM Business Automation Workflow traditional includes optional components running on WebSphere Liberty: User Management Service and Process Federation Service. IBM Business Automation Workflow on Containers builds upon WebSphere Liberty. Multiple security vulnerabilies have been reported...

7.5CVSS6.9AI score0.01975EPSS
SaveExploits0Affected Software2
Rows per page
Query Builder