CVE-2024-22329

low-risk

Published 2024-04-17

IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.3 are vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker could exploit this vulnerability to conduct the SSRF attack. X-Force ID: 279951.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.3/10 Medium

ADJACENT_NETWORK / LOW complexity

Affected Products (2)

Websphere Application Server

Affected Vendors

Ibm

References (4)

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/279951

Vendor Advisory https://www.ibm.com/support/pages/node/7148380

Third Party Advisory https://exchange.xforce.ibmcloud.com/vulnerabilities/279951

Vendor Advisory https://www.ibm.com/support/pages/node/7148380

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 7/34 · Low