cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-38712,https://securityvulnerability.io/vulnerability/CVE-2022-38712,Man-in-the-Middle Vulnerability in IBM WebSphere Application Server,"A vulnerability exists in IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0 that could enable a man-in-the-middle attacker to exploit SOAPAction spoofing. This exploitation could result in unauthorized operations being executed, potentially compromising the security and integrity of the application and its data. It is essential for users to review their security protocols and ensure that appropriate measures are taken to mitigate this risk.",IBM,IBM Websphere Application Server,5.9,MEDIUM,0.0006000000284984708,false,,false,false,false,,,false,false,,2022-11-03T00:00:00.000Z,0
CVE-2018-1553,https://securityvulnerability.io/vulnerability/CVE-2018-1553,,"IBM WebSphere Application Server Liberty prior to 18.0.0.2 could allow a remote attacker to obtain sensitive information, caused by mishandling of exceptions by the SAML Web SSO feature. IBM X-Force ID: 142890.",IBM,IBM Websphere Application Server Liberty,5.3,MEDIUM,0.001829999964684248,false,,false,false,false,,,false,false,,2018-06-27T18:29:00.000Z,0
CVE-2017-1503,https://securityvulnerability.io/vulnerability/CVE-2017-1503,,"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578.",IBM,IBM Websphere Application Server,6.1,MEDIUM,0.0013200000394135714,false,,false,false,false,,,false,false,,2017-10-10T21:00:00.000Z,0
CVE-2017-1194,https://securityvulnerability.io/vulnerability/CVE-2017-1194,,"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123669.",IBM,IBM Websphere Application Server,8.8,HIGH,0.002259999979287386,false,,false,false,false,,,false,false,,2017-04-28T17:00:00.000Z,0