Code injection

2016-10-0510:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

JSON

IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.43, 8.0 before 8.0.0.13, 8.5 before 8.5.5.11, 9.0 before 9.0.0.2, and Liberty before 16.0.0.4 allows remote authenticated users to execute arbitrary Java code via a crafted serialized object.

CPENameOperatorVersion
websphere_application_servereq7.0.0.14
websphere_application_servereq8.5.5.6
websphere_application_servereq7.0.0.12
websphere_application_servereq7.0.0.2
websphere_application_servereq8.5.5.1 liberty-profile
websphere_application_servereq7.0.0.37
websphere_application_servereq7.0.0.31
websphere_application_servereq7.0.0.24
websphere_application_servereq7.0.0.25
websphere_application_servereq7.0.0.33

Name	Operator	Version
websphere_application_server	eq	7.0.0.14
websphere_application_server	eq	8.5.5.6
websphere_application_server	eq	7.0.0.12
websphere_application_server	eq	7.0.0.2
websphere_application_server	eq	8.5.5.1 liberty-profile
websphere_application_server	eq	7.0.0.37
websphere_application_server	eq	7.0.0.31
websphere_application_server	eq	7.0.0.24
websphere_application_server	eq	7.0.0.25
websphere_application_server	eq	7.0.0.33