CVE-2022-35282

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF)

Medium · published September 28, 2022

CVSS v3.0
4.3
EPSS
0%
Percentile
26.5
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive data.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:A/S:U/UI:N/I:N/AC:L/PR:N/A:N/C:L/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.5th percentile
Published
2022-09-28T15:55Z
EPSS history
Timeline
  • 28 SEP 15:55Z
    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF)
    cvelistv5