<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent activity.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains the recent activity for atluxity.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 15 Apr 2026 00:36:08 +0000</lastBuildDate>
    <item>
      <title>PH65941:IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)</title>
      <link>https://vulnerability.circl.lu/comment/62e17ecb-0345-4b1c-b7d6-343410dd1084</link>
      <description>**Abstract**
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

**Download Description**

PH65941 resolves the following problem:

ERROR DESCRIPTION:
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

PROBLEM SUMMARY:
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

PROBLEM CONCLUSION:
Confidential for CVE-2025-27907.

The fix for this APAR is targeted for inclusion in 8.5.5.28, 9.0.5.24.

For more information, see Recommended Updates for WebSphere Application Server:
https://www.ibm.com/support/pages/node/715553

**Prerequisites**
None

**Problems Solved**
PH65941

Source: https://www.ibm.com/support/pages/node/7231182</description>
      <content:encoded>**Abstract**
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

**Download Description**

PH65941 resolves the following problem:

ERROR DESCRIPTION:
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

PROBLEM SUMMARY:
IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1)

PROBLEM CONCLUSION:
Confidential for CVE-2025-27907.

The fix for this APAR is targeted for inclusion in 8.5.5.28, 9.0.5.24.

For more information, see Recommended Updates for WebSphere Application Server:
https://www.ibm.com/support/pages/node/715553

**Prerequisites**
None

**Problems Solved**
PH65941

Source: https://www.ibm.com/support/pages/node/7231182</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/comment/62e17ecb-0345-4b1c-b7d6-343410dd1084</guid>
      <pubDate>Wed, 23 Apr 2025 08:25:20 +0000</pubDate>
    </item>
  </channel>
</rss>
