CVE-2018-1719: IBM WebSphere Application Server

Medium severity, CVSS 5.9. EPSS: 2.4% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 8.5 and 9.0 could provide weaker than expected security under certain conditions. This could result in a downgrade of TLS protocol. A remote attacker could exploit this vulnerability to perform man-in-the-middle attacks. IBM X-Force ID: 147292.

Affected products

• IBM WebSphere Application Server: from 8.5.0.0, up to and including 8.5.5.14; from 9.0.0.0, up to and including 9.0.0.8

Published 2018-09-14. Last modified 2026-06-17.