Skip to content
OpenAdvisories
Medium · 6.6 CVE-2020-4163 EUVD-2020-25410GHSA-4x62-hpqm-w7cr

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a malici…

Published Feb 4, 2020 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 —

References