CVE-2020-4576

🗓️ 01 Oct 2020 15:37:08Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 75 Views

IBM WebSphere App Server 7.5-9.0 traditional allows remote attacker to obtain sensitive info with crafted sequence of serialized objects

Reporter	Title	Published	Views	Family All 46
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Master Data Management	27 Apr 202210:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in WebSphere Application Server affect Predictive Maintenance and Quality and Predictive Maintenance Insights	19 Oct 202015:09	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-4576)	2 Oct 202008:41	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Business Service Manager (CVE-2020-4576)	30 Oct 202016:22	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2020-4629 and CVE-2020-4576)	5 Oct 202018:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-4576)	21 Jan 202105:38	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerabilty has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2020-4576)	12 Oct 202017:44	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to an information disclosure vulnerability (CVE-2020-4576)	7 Jan 202102:35	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is vulnerable to an information disclosure vulnerability (CVE-2020-4576)	30 Sep 202022:51	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2020-4576)	2 Oct 202015:52	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.19

ibm websphere_application_serverRange9.0.0.0–9.0.5.6

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6339807
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/184428

21 Nov 2024 05:32Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5

CVSS 35.3

EPSS0.00439