EUVD-2020-25612

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery affecting sensitive data.

Reporter	Title	Published	Views	Family All 32
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with IBM WebSphere Application Server Patterns is vulnerable to a server-side request forgery vulnerability (CVE-2020-4365)	14 May 202019:03	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM StoredIQ for Legal	4 Mar 202109:24	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server shipped with IBM Cloud Pak for Applications is vulnerable to a server-side request forgery vulnerability (CVE-2020-4365)	27 Jul 202015:08	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2020-4365)	14 May 202013:55	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Security Directory Server (CVE-2020-4589 and CVE-2020-4365)	23 Mar 202121:52	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Operations Analytics Predictive Insights (CVE-2020-4365)	12 Oct 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2020-4365)	4 Jun 202013:58	–	ibm
IBM Security Bulletins	Security Bulletin: WebSphere Application Server used in IBM WebSphere Application Server in IBM Cloud is vulnerable to a server-side request forgery vulnerability (CVE-2020-4365)	16 Jun 202014:52	–	ibm
IBM Security Bulletins	Security Bulletin: A Security Vulnerability has been Identified in Websphere Application Server Shipped with Predictive Customer Intelligence (CVE-2020-4365)	23 Jun 202020:14	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in WebSphere® Application Server shipped with IBM® Intelligent Operations Center (CVE-2020-4365)	21 May 202008:56	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "af8deea7-e31b-3e8a-9ee9-212fc2feeb8a",
        "vendor": {
          "name": "IBM"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c875c8d-959a-3bc6-ac31-b85a3b39b3d7",
        "product": {
          "name": "WebSphere Application Server"
        },
        "product_version": "8.5"
      }
    ]
  }
]

Source	Link
ibm	www.ibm.com/support/pages/node/6209099
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/178964
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.3Medium risk

Vulners AI Score5.3

CVSS 35.3

CVSS 24

CVSS 3.14.3

EPSS0.00091