CVE-2022-38712

No fix known EPSS <1%CVSS 5.9

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

Published 2022-11-03 · CVE record · OSV

Products: ibm websphere_application_server