CVE-2019-4279

🗓️ 17 May 2019 15:20:16Reported by ibmType

IBM WebSphere App Srvr 8.5 & 9.0 allow remote attacker to execute arbitrary code with serialized objects. CVE-2019-427

Reporter	Title	Published	Views	Family All 24
IBM Security Bulletins	Security Bulletin: Security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Service Registry and Repository (CVE-2019-4279)	21 May 201917:40	–	ibm
IBM Security Bulletins	Security Bulletin: Remote code execution in WebSphere Application Server ND (CVE-2019-4279)	2 Jul 201913:05	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with OpenPages GRC Platform (CVE-2019-4279)	24 May 201915:25	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server ND which is used by IBM Rational ClearQuest (CVE-2019-4279)	12 Jun 201902:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	4 Jun 201919:15	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2019-4279)	21 May 201919:40	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server ND shipped with IBM Security Identity Manager ( CVE-2019-4279)	31 May 201907:55	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2019-4279)	22 May 201915:30	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2019-4279)	17 May 201915:50	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange8.5.0.0–8.5.5.15

ibm websphere_application_serverRange9.0.0.0–9.0.0.11

ibm websphere_application_serverMatch7.0.0.0

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/108450
ibm	www.ibm.com/support/docview.wss
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/160445

21 Nov 2024 04:43Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

CVSS 210

CVSS 39

EPSS0.83649

CWE-502