CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
88.0%
WebSphere Application Server Liberty is shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager Process Federation Server (since 8.5.6) and User Management Service (since 18.0.0.1). Information about a security vulnerability affecting IBM WebSphere Application Server Liberty have been published in a security bulletin.
Refer to the security bulletins(s) listed in the Remediation/Fixes section
Affected Product(s) | Version(s) |
---|---|
IBM Business Automation Workflow | V19.0 |
V18.0 | |
IBM Business Process Manager | V8.6 |
V8.5 |
Please consult the security bulletin: Swagger vulnerability affects WebSphere Application Server Liberty (CVE-2019-17495) for vulnerability details and information about fixes.
None
Vendor | Product | Version | CPE |
---|---|---|---|
ibm | business_process_manager | 8.6 | cpe:2.3:a:ibm:business_process_manager:8.6:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 8.5.7. | cpe:2.3:a:ibm:business_process_manager:8.5.7.:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 201706 | cpe:2.3:a:ibm:business_process_manager:201706:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 201703 | cpe:2.3:a:ibm:business_process_manager:201703:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 201612 | cpe:2.3:a:ibm:business_process_manager:201612:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 201609 | cpe:2.3:a:ibm:business_process_manager:201609:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 201606 | cpe:2.3:a:ibm:business_process_manager:201606:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 8.5.7 | cpe:2.3:a:ibm:business_process_manager:8.5.7:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 8.5.6.2 | cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:* |
ibm | business_process_manager | 8.5.6.1 | cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
88.0%