CVE-2024-35154CWE-250

IBM WebSphere Application Server code execution

High · published July 9, 2024

CVSS v3.1
7.2
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01163 · 67.0th percentile
Weakness
CWE-250 · Execution with Unnecessary Privileges
Published
2024-07-09T21:57Z
EPSS history
Timeline
  • 09 JUL 21:57Z
    IBM WebSphere Application Server code execution
    cvelistv5