VULNERABILITY INTELLIGENCE

CVE-2022-38712

CVSS score5.9 MEDIUM
EPSS probability0.63%
CISA KEVNot currently listed
Published2022-11-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

"IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Web services could allow a man-in-the-middle attacker to conduct SOAPAction spoofing to execute unwanted or unauthorized operations. IBM X-Force ID: 234762."

Weakness classification

  • nvd@nist.gov: CWE-290
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-290

Primary references