HTTP Header Injection Vulnerability in IBM WebSphere Application Server
CVE-2022-34165
Key Information:
- Vendor
IBM
- Vendor
- CVE Published:
- 9 September 2022
What is CVE-2022-34165?
IBM WebSphere Application Server versions 7.0, 8.0, 8.5, and 9.0, along with Liberty versions 17.0.0.3 through 22.0.0.9, exhibit a vulnerability due to improper validation of HTTP headers. This can lead to potential exploits such as cache poisoning and cross-site scripting attacks, compromising the integrity and security of affected systems. No sensitive data is directly exposed, but the potential for further attacks can significantly impact user trust and system functionality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
WebSphere Application Server 7.0
WebSphere Application Server 8.0
WebSphere Application Server 8.5
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved