[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-22393":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":26,"cwes":27,"cpes":28,"technologies":69,"references":71,"score":74,"epss_score":75,"epss_percentile":76,"is_kev":77,"cisa_kev_date_added":78,"cisa_kev_due_date":78,"cisa_ssvc":79,"attack_mappings":85,"exploits":92},295438,"CVE-2022-22393","EUVD-2022-27539","IBM WebSphere Application Server Liberty 17.0.0.3 through 22.0.0.5 , with the adminCenter-1.0 feature configured, could allow an authenticated user to issue a request to obtain the status of HTTP\u002FHTTPS ports which are accessible by the application server. IBM X-Force ID: 222078.","2022-05-13T17:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":19},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":18},"2.0",3.5,"NETWORK","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","NONE","MEDIUM","PARTIAL",{"scope":20,"version":21,"baseScore":22,"attackVector":13,"baseSeverity":17,"vectorString":23,"integrityImpact":16,"userInteraction":16,"attackComplexity":24,"availabilityImpact":16,"privilegesRequired":24,"confidentialityImpact":25},"UNCHANGED","3.1",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","LOW","HIGH",true,[],[29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68],"cpe:2.3:a:ibm:websphere_application_server:19.0.0.6:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.8:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:18.0.0.3:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.7:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.1:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.5:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.10:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.8:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.4:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:22.0.0.1:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.4:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.11:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:17.0.0.4:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.11:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.9:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:18.0.0.1:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.7:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.3:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.4:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.10:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.3:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.3:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.12:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.12:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.2:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.1:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:18.0.0.2:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:22.0.0.5:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.10:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.2:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:17.0.0.3:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.1:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.2:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.5:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:18.0.0.4:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:21.0.0.12:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:20.0.0.6:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.9:*:*:*:liberty:*:*:*","cpe:2.3:a:ibm:websphere_application_server:19.0.0.5:*:*:*:liberty:*:*:*",[70],"Ibm Websphere Application Server",[72,73],"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F222078","https:\u002F\u002Fwww.ibm.com\u002Fsupport\u002Fpages\u002Fnode\u002F6585704",0.53,0.00742,0.5424,false,null,{"timestamp":78,"automatable":80,"tech_impact":81,"exploitation":82,"cisa_decision":83,"cisa_remediation_timeline":84},"no","partial","none",{},"FSU",[86],{"name":87,"source":88,"tactics":89,"technique_id":91},"Exploit Public-Facing Application","attack_vector",[90],"initial-access","T1190",[]]