CVE-2017-1503

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 129578.

• CWE-79

• http://www-01.ibm.com/support/docview.wss?uid=swg22006815Vendor Advisory
• http://www.securityfocus.com/bid/101234Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039521Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129578VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg22006815Vendor Advisory
• http://www.securityfocus.com/bid/101234Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039521Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/129578VDB Entry, Vendor Advisory

Published

Oct 10, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15021bfd_get_debug_link_info_1 in opncls.c in the Binary File Des…
• CVE-2017-15022dwarf2.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15023read_formatted_entries in dwarf2.c in the Binary File Descri…
• CVE-2017-15024find_abstract_instance_name in dwarf2.c in the Binary File D…
• CVE-2017-15025decode_line_info in dwarf2.c in the Binary File Descriptor (…
• CVE-2017-15029Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected…
• CVE-2017-15030Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected…
• CVE-2017-15031In all versions of ARM Trusted Firmware up to and including …7.5
• CVE-2017-15032ImageMagick version 7.0.7-2 contains a memory leak in ReadYC…
• CVE-2017-15033ImageMagick version 7.0.7-2 contains a memory leak in ReadYU…
• CVE-2017-15035EmTec PyroBatchFTP before 3.18 allows remote servers to caus…
• CVE-2017-15037In FreeBSD through 11.1, the smb_strdupin function in sys/ne…