UpHeron
All vulnerabilities

Servers and applications

CVE-2017-1501

IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the web services security bindings settings. IBM X-Force ID: 129576.

Severity
Medium 5.9
Published
18 Aug 2017
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
2% in the next 30 daysHigher than 81% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Information exposure (CWE-200)
Attack
Over the network · Only under certain conditions · No login needed · No user action needed
Attacker can
Read data
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Sources
NVD

Affected software

SoftwareAffected versions
IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server
  • Version 9.0.0.4
  • Version 9.0.0.3
  • Version 9.0.0.2
  • Version 9.0.0.1
All 21 release lines
  • Version 8.0.0.0
  • Version 8.0.0.1
  • Version 8.0.0.2
  • Version 8.0.0.3
  • Version 8.0.0.4
  • Version 8.0.0.5
  • Version 8.0.0.6
  • Version 8.0.0.7
  • Version 8.0.0.8
  • Version 8.0.0.9
  • Version 8.0.0.10
  • Version 8.0.0.11
  • Version 8.0.0.12
  • Version 8.0.0.13
  • Version 8.5.5.10
  • Version 8.5.5.11
  • Version 9.0.0.0
  • Version 9.0.0.1
  • Version 9.0.0.2
  • Version 9.0.0.3
  • Version 9.0.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2017-1501
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2017-1501