CVE-2020-4163

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file…

Medium · published February 4, 2020

CVSS v3.0
6.6
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397.

The record
Technical detail
CVSS v3.0
6.6 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/A:H/I:H/UI:N/C:H/PR:H/S:U/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01551 · 74.9th percentile
Published
2020-02-04T16:45Z
EPSS history
Timeline
  • 04 FEB 16:45Z
    IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file…
    cvelistv5