IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/7145365 | Vendor Advisory |
Configurations
History
16 May 2024, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.4 is vulnerable to a denial of service, caused by sending a specially crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 280400. | |
| CWE | CWE-770 |
02 Apr 2024, 17:56
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Ibm
Ibm websphere Application Server |
|
| Summary |
|
|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/280400 - VDB Entry, Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7145365 - Vendor Advisory |
31 Mar 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-31 12:15
Updated : 2024-05-16 00:15
NVD link : CVE-2024-22353
Mitre link : CVE-2024-22353
CVE.ORG link : CVE-2024-22353
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE
CWE-770
Allocation of Resources Without Limits or Throttling