IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
2025-04-22T17:16:45.033
2025-07-18T15:51:47.543
Analyzed
CVSSv3.1: 4.1 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | websphere_application_server | < 8.5.5.28 | Yes |
| Application | ibm | websphere_application_server | < 9.0.5.24 | Yes |
| Operating System | hp | hp-ux | - | No |
| Operating System | ibm | aix | - | No |
| Operating System | ibm | i | - | No |
| Operating System | ibm | z\/os | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |
| Operating System | oracle | solaris | - | No |