CVE-2023-38737
MediumCVSS 5.9Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
IBM WebSphere Application Server Liberty versions 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources.
Risk Assessment
This vulnerability could lead to service unavailability, impacting the organization's operational continuity and reputation.
Recommendation
It is recommended to update IBM WebSphere Application Server Liberty to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567.