Vulnerabilities > IBM > Websphere Virtual Enterprise

DATE CVE VULNERABILITY TITLE RISK
2020-08-27 CVE-2020-4575 Cross-site Scripting vulnerability in IBM products
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
network
low complexity
ibm CWE-79
6.1
2020-06-05 CVE-2020-4448 Deserialization of Untrusted Data vulnerability in IBM products
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources.
network
low complexity
ibm CWE-502
critical
9.8
2019-09-20 CVE-2019-4505 Unspecified vulnerability in IBM products
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL.
network
low complexity
ibm
5.3
2019-03-06 CVE-2019-4030 Cross-site Scripting vulnerability in IBM products
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting.
network
low complexity
ibm CWE-79
5.4