High · 8.1 CVE-2023-23477 EUVD-2023-27577GHSA-34mr-cvr4-m435

IBM WebSphere Application Server code execution

Published Feb 3, 2023 · Updated Mar 25, 2025 · Assigned by ibm

Vendor: IBM Product: WebSphere Application Server

Description

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.

Affected products

Vendor	Product	Affected	Fixed
IBM	WebSphere Application Server	8.5, 9.0	—

Advisories 1

WID-SEC-2023-0237 IBM WebSphere Application Server: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Jun 5, 2023

References

https://www.ibm.com/support/pages/node/6891111 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/245513 vdb-entry