CVE-2019-4304

MEDIUM 6.3CVE-2019-4304 · Published 30/09/2019 · updated 17/06/2026

In short

CVE-2019-4304 is a MEDIUM (CVSS 6.3) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.2% of all vulnerabilities.
Fix: update to 19.0.0.10 or later.

Package	Affected versions	Patched versions
websphere application server ibm	`< 19.0.0.10`	`19.0.0.10`

Description

IBM WebSphere Application Server - Liberty could allow a remote attacker to bypass security restrictions caused by improper session validation. IBM X-Force ID: 160950.

References

exchange.xforce.ibmcloud.com/vulnerabilities/160950 · VDB Entry
ibm.com/support/pages/node/960171 · Vendor Advisory

More vulnerabilities in websphere application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere application server

ibm

< 19.0.0.10

19.0.0.10

More vulnerabilities in websphere application server

See all →