CVE-2015-1932: IBM WebSphere Application Server

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially sensitive information about the proxy-server software by reading the HTTP Via header.

Affected products

• IBM WebSphere Application Server: version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.0.0.5 only; version 7.0.0.6 only; …
• IBM WebSphere Virtual Enterprise: up to and including 7.0.0.6

Published 2015-08-22. Last modified 2026-06-17.