CVE-2020-4450

🗓️ 05 Jun 2020 12:55:18Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 247 Views

IBM WebSphere App Srvr 8.5 & 9.0 vuln to remote code exec via serialized obj. IBM X-Force ID: 181231

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM HTTP Server and IBM WebSphere Application Server used in IBM WebSphere Application Server in IBM Cloud	16 Jun 202013:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM StoredIQ for Legal	4 Mar 202109:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for, IBM Tivoli Netcool Configuration Manager (CVE-2020-4450)	11 Aug 202010:01	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is is vulnerable to a remote code execution vulnerability (CVE-2020-4450)	28 Jul 202006:11	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	3 Aug 202009:37	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM InfoSphere Master Data Management Server 11.6	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Operations Analytics Predictive Insights (CVE-2020-4450)	12 Aug 202015:26	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with IBM Cloud Pak for Applications is vulnerable to a remote code execution vulnerability (CVE-2020-4450)	21 Jul 202019:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Identity Manager Virtual Appliance is affected by multiple vulnerabilities	29 Aug 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with Tivoli Access Manager for e-business	7 Oct 202021:32	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange8.5.0.0–8.5.5.18

ibm websphere_application_serverRange9.0.0.0–9.0.5.5

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6220294
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-20-689/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/181231

21 Nov 2024 05:32Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.71859

CWE-502