CVE-2022-22476: IBM Open Liberty

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.7 and Open Liberty are vulnerable to identity spoofing by an authenticated user using a specially crafted request. IBM X-Force ID: 225604.

Affected products

• IBM Open Liberty: from 17.0.0.3, before 22.0.0.8 (fixed in 22.0.0.8)
• IBM WebSphere Application Server: from 17.0.0.3, before 22.0.0.8 (fixed in 22.0.0.8)

Published 2022-07-08. Last modified 2026-06-17.