7.5
CVE-2024-25026
- EPSS 0.02%
- Published 25.04.2024 13:15:51
- Last modified 27.02.2025 16:24:20
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 are vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 281516.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server SwEditiontraditional Version >= 8.5.0.0 <= 8.5.5.25
Ibm ≫ Websphere Application Server SwEditiontraditional Version >= 9.0.0.0 <= 9.0.5.19
Ibm ≫ Websphere Application Server SwEditionliberty Version >= 17.0.0.3 <= 24.0.0.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.031 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| psirt@us.ibm.com | 5.9 | 2.2 | 3.6 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.