IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/262567 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/7027509 | Patch Vendor Advisory |
Configurations
History
22 Aug 2023, 22:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:* | |
| CWE | CWE-400 | |
| First Time |
Ibm
Ibm websphere Application Server |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/262567 - VDB Entry, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/7027509 - Patch, Vendor Advisory |
16 Aug 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-16 19:15
Updated : 2023-08-22 22:38
NVD link : CVE-2023-38737
Mitre link : CVE-2023-38737
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-400
Uncontrolled Resource Consumption