CVE-2024-35154

No fix known EPSS 1%CVSS 7.2

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote authenticated attacker, who has authorized access to the administrative console, to execute arbitrary code. Using specially crafted input, the attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 292641.

Published 2024-07-09 · CVE record · OSV

Products: ibm websphere_application_server