cbcvebase.
CVE-2020-4448
published 2020-06-05

CVE-2020-4448: IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a…

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228.

Affected

8 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_application_server
ibmwebsphere_application_server
ibmwebsphere_application_server
ibmwebsphere_application_server
ibmwebsphere_application_server>= 8.5.0.0 < 8.5.5.188.5.5.18
ibmwebsphere_application_server>= 9.0.0.0 < 9.0.5.49.0.5.4
ibmwebsphere_virtual_enterprise
ibmwebsphere_virtual_enterprise