CVE Feed

    Dashboard / CVE / CVE-2023-46158

    CVE-2023-46158

    IBM WebSphere Application Server Liberty 23.0.0.9 through 23.0.0.10 could provide weaker than expected security due to improper resource expiration handling. IBM X-Force ID: 268775.

    Published:Oct 25, 2023
    Last Modified:Nov 21, 2024
    EPS:Oct 25, 2023
    EPSS Score:0.00021
    CVSS Score:4.9

    Affected Products

    Vendor
    Ibm
    Product
    Websphere Application Server Liberty

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-613 Insufficient Session Expiration

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-14525 (CVSS 9.4) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty …
    CVE-2026-10571 (CVSS 5.7) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused…
    CVE-2026-18499 (CVSS 8.1) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation w…
    CVE-2026-8400 (CVSS 8.1) — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delive…
    CVE-2026-10842 (CVSS 7.5) — IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through …
    CVE-2026-11897 (CVSS 7.5) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 is vulnerable to a denial of service, cau…
    CVE-2026-14980 (CVSS 8.3) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to cross-site request forge…
    CVE-2026-14976 (CVSS 7.1) — IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by remote code execution with…
    CVE-2024-22329 (CVSS 4.3) — IBM WebSphere Application Server 8.5, 9.0 and IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High