IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 127476.
https://www.ibm.com/support/docview.wss?uid=swg22011400
https://exchange.xforce.ibmcloud.com/vulnerabilities/127476