CVE-2024-35154

HIGH

IBM WebSphere Application Server <9.0 - Authenticated RCE

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

References (2)

Scores

CVSS v3 7.2
EPSS 0.0029
EPSS Percentile 51.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-250
Status published
Products (1)
ibm/websphere_application_server 8.5.0.0 - 8.5.5.25
Published Jul 09, 2024
Tracked Since Feb 18, 2026