IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is vulnerable to server-side request forgery (SSRF). This may allow remote attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
| Vendor | Product | Versions |
|---|---|---|
| ibm | websphere_application_server | < 26.0.0.4 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ibm | i | cert_advisory | 90% |
| ibm | datapower | cert_advisory | 90% |
| ibm | websphere application | cert_advisory | 90% |