← Database

CVE-2022-38712

MEDIUM CVSS: 5.9 Published: 2022-11-03 Modified: 2026-06-17

Description

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

Affected Platforms

Microsoft WindowsOracle SolarisIbm IHp Hp-UxIbm AixIbm Z\/OsLinux Linux KernelIbm Websphere Application Server

Weakness Type

CWE-290, CWE-290

References