CVE-2012-4850 — Improper Input Validation in IBM Websphere Application Server

CWE-20 — Improper Input Validation3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.8%
top 26.06%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Websphere Application Server
Timeline
PublishedNov 14
Latest updateMay 17

Description

IBM WebSphere Application Server 8.5 Liberty Profile before 8.5.0.1, when JAX-RS is used, does not properly validate requests, which allows remote attackers to gain privileges via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-v946-66g4-7cxj: IBM WebSphere Application Server 8↗2022-05-17
▶
CVEList
CVE-2012-4850: IBM WebSphere Application Server 8↗2012-11-14
▶
CVE-2012-4850 — Improper Input Validation in IBM | cvebase