CVE Vulnerabilities

CVE-2024-35154

Published: Jul 09, 2024 | Modified: Sep 20, 2024
CVSS 3.x
7.2
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

Affected Software

Name Vendor Start Version End Version
Websphere_application_server Ibm 8.5.0.0 (including) 8.5.5.25 (including)
Websphere_application_server Ibm 9.0.0.0 (including) 9.0.5.20 (including)

References