Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2018-1695

IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 145769.

Published: Sep 6, 2018
Updated: Nov 9, 2025
CVE: CVE-2018-1695
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

CWE-290

Affected Software
References

Software	From	Fixed in
ibm / websphere_application_server	8.5.5.0	8.5.5.0.x
ibm / websphere_application_server	8.0.0.0	8.0.0.0.x
ibm / websphere_application_server	7.0.0.0	7.0.0.0.x

http://www.securitytracker.com/id/1041643
https://exchange.xforce.ibmcloud.com/vulnerabilities/145769
https://www-01.ibm.com/support/docview.wss?uid=ibm10716523

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo