Vulnerabilities > IBM > Websphere Application Server > 19.0.0.3

DATE CVE VULNERABILITY TITLE RISK
2019-09-30 CVE-2019-4305 Reliance on Cookies without Validation and Integrity Checking vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server Liberty could allow a remote attacker to obtain sensitive information caused by the improper setting of a cookie.
network
low complexity
ibm CWE-565
5.3
5.3
2019-09-30 CVE-2019-4304 Session Fixation vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation.
network
low complexity
ibm CWE-384
6.3
6.3
2019-03-25 CVE-2019-4046 Resource Exhaustion vulnerability in IBM Websphere Application Server
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a denial of service, caused by improper handling of request headers.
network
low complexity
ibm CWE-400
7.5
7.5