CVE-2024-37532

—

CVSS 3.1

8.8 high

EPSS

<1%p29

Published

Jun 20, 2024 (Jun 20, 2024)

Modified

Jun 17, 2026

Description

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to identity spoofing by an authenticated user due to improper signature validation. IBM X-Force ID: 294721.

Vendors: ibm
Products: websphere application server
Weakness: CWE-347
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.