CVE-2021-20354

🗓️ 18 Feb 2021 15:10:45Reported by ibmType

IBM WebSphere AppSrv 8.0, 8.5, & 9.0 remote directory traversal

Reporter	Title	Published	Views	Family All 41
IBM Security Bulletins	Security Bulletin: Websphere Application Server is vulnerable to a directory traversal vulnerability (CVE-2021-20354)	12 Mar 202109:59	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products (CVE-2021-20354)	14 Sep 202215:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products on IBM Jazz technology.	1 Jun 202115:41	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in WebSphere Application Server affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise	17 Oct 202400:55	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2021-20354)	18 Feb 202118:44	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to a directory traversal vulnerability (CVE-2021-20354)	18 Feb 202117:19	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) (CVE-2021-20353)	24 Feb 202105:21	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to a directory traversal vulnerability (CVE-2021-20354)	25 May 202117:22	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability ( CVE-2021-20354 ) has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights	18 Jun 202112:34	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20354)	6 Mar 202117:54	–	ibm

NVD

Vulners

Node

ibm websphere_application_serverRange8.0.0.0–8.0.0.15

ibm websphere_application_serverRange8.5.0.0–8.5.5.19

ibm websphere_application_serverRange9.0.0.0–9.0.5.6

AND

hp hp-uxMatch-

ibm aixMatch-

ibm iMatch-

ibm z/osMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

oracle solarisMatch--

[
  {
    "product": "WebSphere Application Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.0"
      },
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/194883
ibm	www.ibm.com/support/pages/node/6415959

21 Nov 2024 05:46Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

CVSS 27.8

CVSS 35.9

EPSS0.00461

CWE-22