IBM Liberty vulnerabilities

3 CVEs affecting IBM Liberty, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-1681, published 2018-01-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-1583, published 2017-10-24. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote attacker to obtain sensitive information caused by improper error handling by MyFaces in JSF.
CVE-2015-0178, published 2015-03-18. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. The Java overlay feature in IBM Bluemix Liberty before 1.13-20150209-1122 for Java does not properly support WAR applications, which allows remote attackers to obtain sensitive information via…
CVE-2017-1681, published 2018-01-11. Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days. IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application requests, which could…