NetSight
high8.1

CVE-2018-1904

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with…

Impact

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with a serialized object from untrusted sources. IBM X-Force ID: 152533.

Affected products

VendorProductAffected versions
IbmWebsphere Application Server
from 7.0.0.0 through 7.0.0.45
from 8.0.0.0 through 8.0.0.15
from 8.5.0.0 through 8.5.5.14
from 9.0.0.0 through 9.0.0.9

Weakness classification

References