CVE-2021-20480

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF)

Medium · published April 8, 2021

CVSS v3.0
4.3
EPSS
1%
Percentile
66.7
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/A:N/AC:L/PR:L/S:U/I:N/UI:N/AV:N/C:L/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.01151 · 66.7th percentile
Published
2021-04-08T12:20Z
EPSS history
Timeline
  • 08 APR 12:20Z
    IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF)
    cvelistv5