5.3

CVE-2022-22473

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to obtain sensitive information caused by improper handling of Administrative Console data. This information could be used in further attacks against the system. IBM X-Force ID: 225347.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version >= 7.0.0.0 <= 7.0.0.45
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Ibm ≫ Z/os Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Websphere Application Server Version >= 8.0.0.0 <= 8.0.0.15
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Ibm ≫ Z/os Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Websphere Application Server Version >= 8.5.0.0 <= 8.5.5.21
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Ibm ≫ Z/os Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Ibm ≫ Websphere Application Server Version >= 9.0.0.0 <= 9.0.5.12
   Hp ≫ Hp-ux Version-
   Ibm ≫ Aix Version-
   Ibm ≫ I Version-
   Ibm ≫ Z/os Version-
   Linux ≫ Linux Kernel Version-
   Microsoft ≫ Windows Version-
   Oracle ≫ Solaris Version- HwPlatform-
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.59
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
IBM 3.7 2.2 1.4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://exchange.xforce.ibmcloud.com/vulnerabilities/225347
Vendor Advisory
VDB Entry
https://www.ibm.com/support/pages/node/6603421
Patch
Vendor Advisory