Description
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.
Related CPE's
a
ibm
websphere_application_server
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/292641
https://www.ibm.com/support/pages/node/7159825
https://exchange.xforce.ibmcloud.com/vulnerabilities/292641
https://www.ibm.com/support/pages/node/7159825
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
7.2 · High
Information
Source identifier
Vulnerability status
Modified
Published
2024-07-09T20:15:02.227Z
1 year agoLast modified
2024-11-21T08:19:50.140Z
1 year ago