Server-Side Request Forgery Vulnerability in IBM WebSphere Application Server

CVE-2025-27907

What is CVE-2025-27907?

IBM WebSphere Application Server versions 8.5 and 9.0 contain a server-side request forgery (SSRF) vulnerability that allows an authenticated attacker to make unauthorized requests from the server. This could lead to network enumeration and the potential for further attacks, posing a significant risk to network security. Proper security measures and timely updates are essential to mitigate this threat.

References