Lucene search
+L

15881 matches found

Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•10 views

PT-2025-33106 · Ibm · Ibm Websphere Application Server Liberty

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty affected versions not specified Description: IBM WebSphere Application Server Liberty is susceptible to a denial of service condition. Recommendations: At the moment, there is no information about a...

7.5CVSS5.8AI score0.00451EPSS
SaveExploits0References7
OSV
OSV
•added 2025/08/12 8:15 p.m.•8 views

CVE-2025-36000

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.8CVSS6.2AI score0.00177EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/08/12 7:39 p.m.•17 views

CVE-2025-36000 IBM WebSphere Application Server Liberty cross-site scripting

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.4CVSS0.00177EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/12 7:39 p.m.•3 views

CVE-2025-36000 IBM WebSphere Application Server Liberty cross-site scripting

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.4CVSS6.3AI score0.00177EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/12 7:39 p.m.•53 views

CVE-2025-36000

CVE-2025-36000 affects IBM WebSphere Application Server Liberty. The Connected IBM bulletin confirms Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting, allowing a privileged user to embed arbitrary JavaScript in the Web UI and potentially disclose credentials within a...

4.8CVSS6.3AI score0.00177EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2025/08/12 7:15 p.m.•8 views

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
NVD
NVD
•added 2025/08/12 7:15 p.m.•12 views

CVE-2025-36124

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS0.00395EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/08/12 6:45 p.m.•8 views

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

5.9CVSS7.1AI score0.00395EPSS
SaveExploits0References1
CVE
CVE
•added 2025/08/12 6:45 p.m.•61 views

CVE-2025-36124

CVE-2025-36124 is described by IBM security bulletins as a vulnerability in IBM WebSphere Liberty/Liberty-based IBM products where a remote attacker could bypass security restrictions due to JMS messaging configuration not being honored. Connected IBM bulletins show affected products/versions and...

7.5CVSS7.1AI score0.00395EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/08/12 6:45 p.m.•32 views

CVE-2025-36124 IBM WebSphere Application Server Liberty bypass security

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

5.9CVSS0.00395EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/12 3:18 p.m.•16 views

Security Bulletin: IBM WebSphere Application Server Liberty is affected by a stored cross-site scripting vulnerability (CVE-2025-36000)

Summary IBM WebSphere Application Server Liberty is affected by a stored cross-site scripting vulnerability with the adminCenter-1.0 feature enabled. Vulnerability Details CVEID:CVE-2025-36000 DESCRIPTION: IBM WebSphere Application Server Liberty is vulnerable to stored cross-site scripting. This...

4.8CVSS6AI score0.00177EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•9 views

PT-2025-32879

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8 Description: IBM WebSphere Application Server Liberty may allow a remote attacker to bypass security restrictions due to a failure to honor JMS messaging configuratio...

7.5CVSS7.2AI score0.00395EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•8 views

CVE-2025-36124: Privilege Chaining

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 could allow a remote attacker to bypass security restrictions caused by a failure to honor JMS messaging configuration...

7.5CVSS5.9AI score0.00395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•4 views

CVE-2025-36000: Improper Neutralization of Input During Web Page Generation

IBM WebSphere Application Server Liberty 17.0.0.3 through 25.0.0.8 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure with...

4.8CVSS5.7AI score0.00177EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•15 views

IBM WebSphere Application Server Liberty 安全漏洞

IBM WebSphere Application Server Liberty is a Java application server from International Business Machines IBM built on top of the Open Liberty project. A security vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, which stems from a failure to...

7.5CVSS4.2AI score0.00395EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•10 views

IBM WebSphere Application Server Liberty 跨站脚本漏洞

IBM WebSphere Application Server Liberty is a lightweight Java application server from IBM for rapid development and deployment of cloud-native applications. A stored cross-site scripting XSS vulnerability exists in IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8, whic...

4.8CVSS5.8AI score0.00177EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•12 views

PT-2025-32887

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty versions 17.0.0.3 through 25.0.0.8 Description: IBM WebSphere Application Server Liberty is susceptible to stored cross-site scripting. A privileged user can embed arbitrary JavaScript code into the We...

4.8CVSS5.5AI score0.00177EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/11 1:11 p.m.•8 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-36097)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

7.5CVSS6.9AI score0.00457EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/11 1:11 p.m.•16 views

Security Bulletin: A vulnerability has been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2025-54090)

Summary IBM HTTP Server IHS is used by the IBM Rational ClearQuest server and web components. Information about security vulnerabilities affecting IHS have been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected...

6.3CVSS6.8AI score0.00819EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2025/08/11 1:10 p.m.•5 views

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-33104)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

7.6CVSS6.3AI score0.00249EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder