high8.1
CVE-2018-1904
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with…
Impact
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through an administrative client class with a serialized object from untrusted sources. IBM X-Force ID: 152533.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Websphere Application Server | from 7.0.0.0 through 7.0.0.45 from 8.0.0.0 through 8.0.0.15 from 8.5.0.0 through 8.5.5.14 from 9.0.0.0 through 9.0.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/106193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/152533
- https://www-01.ibm.com/support/docview.wss?uid=ibm10738735
- http://www.securityfocus.com/bid/106193
- https://exchange.xforce.ibmcloud.com/vulnerabilities/152533
- https://www-01.ibm.com/support/docview.wss?uid=ibm10738735