WID-SEC-W-2022-1036

DeutschShown in its original language — a full translation is planned for a future version.

IBM WebSphere Application Server: Mehrere Schwachstellen

view advisory published 2022-04-05

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM WebSphere Application Server ausnutzen, um falsche Informationen darzustellen und Sicherheitsmaßnahmen zu umgehen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-46708US	medium6.1	1.49% (74th)	—	2022-03-11
The swagger-ui-dist package before 4.1.3 for Node.js could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site…
CVE-2018-25031US	medium4.3	42.3% (99th)	Exploit	2022-03-11
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability t…

references

External citations — patches, advisories, analysis.

HCL Article KB0099667 vom 2022-08-13external
WID-SEC-W-2022-1036 - CSAF Versionself
WID-SEC-2022-1036 - Portal Versionself
IBM Security Advisory vom 2022-04-05external
IBM Security Bulletin 6955817 vom 2023-02-15external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan