Описание
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 18.0.0.2 (включая) до 25.0.0.9 (исключая)
Одновременно
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*
Одно из
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*
cpe:2.3:o:ibm:z\/os:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 29%
0.00103
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 5.3
github
6 месяцев назад
IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
EPSS
Процентиль: 29%
0.00103
Низкий
5.3 Medium
CVSS3
7.5 High
CVSS3
Дефекты
CWE-770