Servers and applications
CVE-2022-22476
IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.
- Severity
- High 8.8
- Published
- 8 Jul 2022
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 22.0.0.8
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
IBM WebSphere Application ServerServers and applications · cpe:a:ibm:websphere_application_server |
|