Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-27268

IBM WebSphere Application Server Liberty 18.0.0.2 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 284574.

Published

2024-04-04T18:15:13.823

Last Modified

2025-04-10T21:05:27.080

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.9 (MEDIUM)

Weaknesses

Type: Secondary
CWE-770
Type: Primary
CWE-770

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	ibm	websphere_application_server	< 24.0.0.5	Yes

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 VDB Entry, Vendor Advisory ([email protected])
https://www.ibm.com/support/pages/node/7145809 Vendor Advisory ([email protected])
https://www.kb.cert.org/vuls/id/421644 Third Party Advisory, US Government Resource ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/284574 VDB Entry, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/7145809 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.kb.cert.org/vuls/id/421644 Third Party Advisory, US Government Resource (af854a3a-2127-422b-91ae-364da2661108)