CVE-2020-4448

🗓️ 05 Jun 2020 12:55:17Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 166 Views

IBM WebSphere App Server Network Deployment CVE-2020-4448 allows remote code execution

Reporter	Title	Published	Views	Family All 35
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server and IBM WebSphere Application Server used in IBM WebSphere Application Server in IBM Cloud	16 Jun 202013:32	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2020-4448)	29 Jun 202003:54	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2020-4448)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	3 Aug 202009:37	–	ibm
IBM Security Bulletins	Security Bulletin: Remote code execution vulnerability in WebSphere Application Server ND (CVE-2020-4448)	8 Jun 202014:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities	29 Aug 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by a code execution vulnerability (CVE-2020-4448)	15 Mar 202106:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	7 Oct 202021:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in WebSphere Application Server bundled with IBM WebSphere Application Server Patterns	5 Jun 202018:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Rational ClearCase (CVE-2020-4450, CVE-2020-4449, CVE-2020-4448)	22 Jun 202016:29	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange8.5.0.0–8.5.5.18

ibm websphere_application_serverRange9.0.0.0–9.0.5.4

ibm websphere_virtual_enterpriseMatch7.0

ibm websphere_virtual_enterpriseMatch8.0

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-688/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/181228
ibm	www.ibm.com/support/pages/node/6220336

21 Nov 2024 05:32Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.1624

CWE-502