CVE-2022-22475: IBM Open Liberty

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID: 225603.

Affected products

• IBM Open Liberty: from 17.0.0.3, up to and including 22.0.0.5
• IBM WebSphere Application Server: from 17.0.0.3, up to and including 22.0.0.5

Published 2022-05-17. Last modified 2026-06-17.