CVE-2020-4782

🗓️ 28 Oct 2020 16:15:19Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 77 Views

IBM WebSphere App Server 7.0, 8.0, 8.5, and 9.0 directory traversal vulnerabilit

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server traditional shipped with IBM Operations Analytics Predictive Insights (CVE-2020-4782)	26 Feb 202113:04	–	ibm
IBM Security Bulletins	Security Bulletin: A Security vulnerabilty has been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager (CVE-2020-4782)	2 Nov 202016:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM StoredIQ for Legal	4 Mar 202109:24	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2020-4782)	19 Nov 202017:11	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to a directory traversal vulnerability (CVE-2020-4782)	15 Feb 202115:29	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in embedded IBM WebSphere Application Server, which is shipped with IBM Tivoli Network Manager IP Edition (CVE-2020-4782)	24 Feb 202111:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2020-4782)	29 Oct 202018:00	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server Admin Console, a component of IBM Cloud Pak for Applications, is vulnerable to a directory traversal vulnerability (CVE-2020-4782)	7 Jan 202114:25	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	10 Dec 202006:45	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-4782)	24 Feb 202111:03	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45-

ibm websphere_application_serverRange8.0.0.0–8.0.0.15-

ibm websphere_application_serverRange8.5.0.0–8.5.5.18-

ibm websphere_application_serverRange9.0.0.0–9.0.5.5-

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/189213
ibm	www.ibm.com/support/pages/node/6356083

21 Nov 2024 05:33Current

6.4Medium risk

Vulners AI Score6.4

CVSS 24

CVSS 3.16.5

CVSS 36.5

EPSS0.00392

CWE-22