Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

Related CPE's

a

ibm

websphere_application_server

2

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/292641

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/7159825

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-Other

[email protected]

Secondary
CWE-250

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.2 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2024-07-09T22:15:02.227

3 months ago

Last modified

2024-09-20T17:46:39.890

1 month ago