CVE-2020-5016

🗓️ 10 Mar 2021 15:05:30Reported by ibmType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 67 Views

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 directory traversal vulnerabilit

Reporter	Title	Published	Views	Family All 45
IBM Security Bulletins	Security Bulletin: Vulnerability identified in IBM WebSphere Application Server shipped with IBM WebSphere Service Registry and Repository (CVE-2020-5016)	15 Mar 202117:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products on IBM Jazz technology.	1 Jun 202115:41	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to a Directory Traversal vulnerability (CVE-2020-5016)	11 Mar 202119:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Privileged Identity Manager is affected by WebSphere Application Server is vulnerable to a directory traversal vulnerability	20 Sep 202116:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Application Server affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise	17 Oct 202400:55	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server is vulnerable to a Directory Traversal vulnerability (CVE-2020-5016)	9 Mar 202123:21	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2020-5016)	23 Jun 202117:36	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2020-5016)	23 Jun 202117:34	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest	29 Sep 202112:47	–	ibm
IBM Security Bulletins	Security Bulletin: Embedded WebSphere Application Server is vulnerable to a directory traversal vulnerability affects Content Collector for Email	27 Apr 202113:43	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange7.0.0.0–7.0.0.45

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.19

ibm websphere_application_serverRange9.0.0.0–9.0.5.6

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "7.0"
      },
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6427873
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/193556

21 Nov 2024 05:33Current

6.4Medium risk

Vulners AI Score6.4

CVSS 23.5

CVSS 3.16.5

CVSS 35.3

EPSS0.00208

CWE-22