Description
IBM WebSphere Automation 1.7.5 could allow a remote privileged user, who has authorized access to the swagger UI, to execute arbitrary code. Using specially crafted input, the user could exploit this vulnerability to execute arbitrary code on the system.
References (1)
Core 1
Core References
Vendor Advisory
https://www.ibm.com/support/pages/node/7179994
Scores
CVSS v3
7.2
EPSS
0.0039
EPSS Percentile
60.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-78
Status
published
Products (1)
ibm/websphere_automation
1.7.5
Published
Dec 30, 2024
Tracked Since
Feb 18, 2026