CVE-2018-1904

🗓️ 11 Dec 2018 16:00:00Reported by ibmType

IBM WebSphere App Server 7.0, 8.0, 8.5, and 9.0 allow remote attackers to execute arbitrary Java code

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Security vulnerability is identified in the WebSphere Application Server where the Rational Asset Manager is deployed (CVE-2018-1904)	3 Jan 201913:05	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2018-1904)	13 Dec 201820:50	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server that is shipped with IBM Rational ClearQuest (CVE-2018-1904, CVE-2018-1926)	18 Dec 201814:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	5 Mar 201917:10	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2018-1904)	3 Jan 201902:55	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Business Service Manager (CVE-2018-1904)	25 Feb 201908:25	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Remote code execution vulnerability in WebSphere Application Server may affect IBM InfoSphere Global Name Management (CVE-2018-1904)	20 Apr 202217:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2018-1904)	22 Jan 201920:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2018-1904)	18 Dec 201805:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server	17 Dec 201818:45	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.14

ibm websphere_application_serverRange9.0.0.0–9.0.0.9

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/106193
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/152533
www-01	www.www-01.ibm.com/support/docview.wss

21 Nov 2024 04:00Current

9.3High risk

Vulners AI Score9.3

CVSS 27.5

CVSS 38.1 - 9.8

EPSS0.00776

CWE-502