CVE-2021-20517

🗓️ 07 Jun 2021 14:05:14Reported by ibmType

IBM WebSphere Server 8.5/9.0 allows directory traversal

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM WebSphere Appilcation Server and WebSphere Application Server Liberty affects IBM Engineering ELM products on IBM Jazz technology.	1 Jun 202115:41	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server ND shipped with IBM WebSphere Application Server Patterns is vulnerable to Directory Traversal vulnerability (CVE-2021-20517)	28 May 202116:12	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability ( CVE-2021-20517 ) has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights	24 Sep 202112:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Intelligent Operations Center (CVE-2021-20517)	28 May 202109:18	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Identity Manager	8 Jun 202122:20	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server ND is vulnerable to Directory Traversal vulnerability (CVE-2021-20517)	27 May 202116:50	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Netcool Configuration Manager (CVE-2021-20517)	28 Jun 202114:57	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server ND is vulnerable to Directory Traversal vulnerability (CVE-2021-20517)	31 May 202104:55	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2021-20517)	31 May 202107:13	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2021-20517)	18 Jun 202120:22	–	ibm

NVD

Vulners

Node

ibm websphere_application_server_ndRange8.5.0.0–8.5.5.20

ibm websphere_application_server_ndRange9.0.0.0–9.0.5.8

[
  {
    "product": "WebSphere Application Server ND",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "8.5"
      },
      {
        "status": "affected",
        "version": "9.0"
      }
    ]
  }
]

Source	Link
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/198435
ibm	www.ibm.com/support/pages/node/6456955

17 Jun 2026 03:33Current

8High risk

Vulners AI Score8

CVSS 26.5

CVSS 3.18.8

CVSS 36.4

EPSS0.0186

CWE-22