Описание
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516.
Ссылки
- VDB EntryVendor Advisory
- Vendor Advisory
- VDB EntryVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 8.5.0.0 (включая) до 8.5.5.25 (включая)Версия от 9.0.0.0 (включая) до 9.0.5.19 (включая)Версия от 17.0.0.3 (включая) до 24.0.0.4 (включая)
Одно из
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:traditional:*:*:*
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:traditional:*:*:*
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
EPSS
Процентиль: 4%
0.00019
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 5.9
github
почти 2 года назад
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516.
EPSS
Процентиль: 4%
0.00019
Низкий
5.9 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770