What’s Vulnerable › Vulnerabilities

CVE-2022-43917: IBM WebSphere Application Server information disclosure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-26 · updated 2026-06-17
• Weakness: CWE-327

Description

IBM WebSphere Application Server 8.5 and 9.0 traditional container uses weaker than expected cryptographic keys that could allow an attacker to decrypt sensitive information. This affects only the containerized version of WebSphere Application Server traditional. IBM X-Force ID: 241045.

Affected products

• IBM WebSphere Application Server: 8.5, 9.0

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/241045
• https://www.ibm.com/support/pages/node/6857007
• https://exchange.xforce.ibmcloud.com/vulnerabilities/241045
• https://www.ibm.com/support/pages/node/6857007

Get alerted when CVE-2022-43917 or the next vulnerability affects your stack