CVE-2020-4575

Опубликовано: 27 авг. 2020

Источник: nvd

CVSS3: 4.7

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/184363
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6323293
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/184363
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6323293
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*

Версия от 8.5.0.0 (включая) до 8.5.5.18 (исключая)

cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*

Версия от 9.0.0.0 (включая) до 9.0.5.5 (исключая)

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:websphere_virtual_enterprise:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 33%

0.00131

Низкий

4.7 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-fqq6-8464-3hrq

github

больше 3 лет назад

IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.

EPSS

Процентиль: 33%

0.00131

Низкий

4.7 Medium

CVSS3

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79