Skip to content
OpenAdvisories
Medium · 5.9 CVE-2022-38712 EUVD-2022-41281GHSA-3vq5-h8qx-c7qm

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofi…

Published Nov 3, 2022 · Updated May 2, 2025 · Assigned by ibm

Description

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

Affected products

VendorProductAffectedFixed
— IBM WebSphere Application Server "7.0, 8.0, 8.5, and 9.0" —

Advisories 1

References