CVE-2019-4268

2019-09-1600:00:00

ibm

raw.githubusercontent.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL containing “dot dot” sequences (/…/) to view arbitrary files on the system. IBM X-Force ID: 160201.