CVE-2020-4464

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a…

High · published July 17, 2020

CVSS v3.0

8.8

EPSS

13%

Percentile

96.4

In the wild

Unconfirmed

What it is

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a specially-crafted sequence of serialized objects over the SOAP connector. IBM X-Force ID: 181489.

The record

Technical detail

CVSS v3.0: 8.8 · HIGH
Vector: CVSS:3.0/AC:L/PR:L/S:U/AV:N/I:H/UI:N/C:H/A:H/RC:C/RL:O/E:U
CVSS v4.0: Not supplied
EPSS: 0.13227 · 96.4th percentile
Published: 2020-07-17T13:45Z

EPSS history

Timeline

17 JUL 13:45Z
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code on a system with a…
cvelistv5