CVE-2024-45085: IBM WebSphere Application Server

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 8.5 is vulnerable to a denial of service, under certain configurations, caused by an unexpected specially crafted request. A remote attacker could exploit this vulnerability to cause an error resulting in a denial of service.

Affected products

• IBM WebSphere Application Server: from 8.5.0.0, before 8.5.5.27 (fixed in 8.5.5.27)

Published 2024-10-15. Last modified 2026-06-17.