https://vulnerability.circl.lu/comments/feed 2026-09-17T09:59:43.592375+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent comments. https://vulnerability.circl.lu/comment/a79b754d-9252-4580-8912-42f39c854661 2026-09-17T09:59:43.597397+00:00 Patrick Boulvin https://cvepremium.circl.lu/user/Belspo Microsoft discovered critical vulnerability CVE-2025-27920 affecting the messaging application Output Messenger. Microsoft additionally observed exploitation of the vulnerability since April 2024. According to Microsoft, the attacker needs to be authenticated, although the Output Messenger advisory indicates that privileges are not required to exploit the vulnerability. An attacker could upload malicious files into the server’s startup directory by exploiting this directory traversal vulnerability. This allows an attacker to gain indiscriminate access to the communications of every user, steal sensitive data and impersonate users, possibly leading to operational disruptions, unauthorized access to internal systems, and widespread credential compromise. 2025-05-14T08:54:41.802843+00:00 https://vulnerability.circl.lu/comment/62e17ecb-0345-4b1c-b7d6-343410dd1084 2026-09-17T09:59:43.599036+00:00 Hans-Petter Fjeld https://cvepremium.circl.lu/user/atluxity **Abstract** IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1) **Download Description** PH65941 resolves the following problem: ERROR DESCRIPTION: IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1) PROBLEM SUMMARY: IBM WebSphere Application Server is vulnerable to server-side request forgery (CVE-2025-27907 CVSS 4.1) PROBLEM CONCLUSION: Confidential for CVE-2025-27907. The fix for this APAR is targeted for inclusion in 8.5.5.28, 9.0.5.24. For more information, see Recommended Updates for WebSphere Application Server: https://www.ibm.com/support/pages/node/715553 **Prerequisites** None **Problems Solved** PH65941 Source: https://www.ibm.com/support/pages/node/7231182 2025-04-23T08:25:20.348540+00:00