CVE-2015-1920 IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instr...
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 6.1 | No fix listed |
| ibm websphere application server | = 6.1.0 | No fix listed |
| ibm websphere application server | = 6.1.0.0 | No fix listed |
| ibm websphere application server | = 6.1.0.1 | No fix listed |
| ibm websphere application server | = 6.1.0.2 | No fix listed |
| ibm websphere application server | = 6.1.0.3 | No fix listed |
| ibm websphere application server | = 6.1.0.5 | No fix listed |
| ibm websphere application server | = 6.1.0.7 | No fix listed |
| ibm websphere application server | = 6.1.0.9 | No fix listed |
| ibm websphere application server | = 6.1.0.11 | No fix listed |
| ibm websphere application server | = 6.1.0.12 | No fix listed |
| ibm websphere application server | = 6.1.0.13 | No fix listed |
| ibm websphere application server | = 6.1.0.14 | No fix listed |
| ibm websphere application server | = 6.1.0.15 | No fix listed |
| ibm websphere application server | = 6.1.0.17 | No fix listed |
| ibm websphere application server | = 6.1.0.19 | No fix listed |
| ibm websphere application server | = 6.1.0.21 | No fix listed |
| ibm websphere application server | = 6.1.0.23 | No fix listed |
| ibm websphere application server | = 6.1.0.25 | No fix listed |
| ibm websphere application server | = 6.1.0.27 | No fix listed |
| ibm websphere application server | = 6.1.0.29 | No fix listed |
| ibm websphere application server | = 6.1.0.31 | No fix listed |
| ibm websphere application server | = 6.1.0.33 | No fix listed |
| ibm websphere application server | = 6.1.0.35 | No fix listed |
| ibm websphere application server | = 6.1.0.37 | No fix listed |
Show 53 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm websphere application server | = 6.1.0.39 | No fix listed |
| ibm websphere application server | = 6.1.0.41 | No fix listed |
| ibm websphere application server | = 6.1.0.43 | No fix listed |
| ibm websphere application server | = 6.1.0.45 | No fix listed |
| ibm websphere application server | = 6.1.0.47 | No fix listed |
| ibm websphere application server | = 7.0 | No fix listed |
| ibm websphere application server | = 7.0.0.1 | No fix listed |
| ibm websphere application server | = 7.0.0.2 | No fix listed |
| ibm websphere application server | = 7.0.0.3 | No fix listed |
| ibm websphere application server | = 7.0.0.10 | No fix listed |
| ibm websphere application server | = 7.0.0.11 | No fix listed |
| ibm websphere application server | = 7.0.0.12 | No fix listed |
| ibm websphere application server | = 7.0.0.13 | No fix listed |
| ibm websphere application server | = 7.0.0.14 | No fix listed |
| ibm websphere application server | = 7.0.0.15 | No fix listed |
| ibm websphere application server | = 7.0.0.16 | No fix listed |
| ibm websphere application server | = 7.0.0.17 | No fix listed |
| ibm websphere application server | = 7.0.0.18 | No fix listed |
| ibm websphere application server | = 7.0.0.19 | No fix listed |
| ibm websphere application server | = 7.0.0.21 | No fix listed |
| ibm websphere application server | = 7.0.0.22 | No fix listed |
| ibm websphere application server | = 7.0.0.23 | No fix listed |
| ibm websphere application server | = 7.0.0.24 | No fix listed |
| ibm websphere application server | = 7.0.0.25 | No fix listed |
| ibm websphere application server | = 7.0.0.27 | No fix listed |
| ibm websphere application server | = 7.0.0.29 | No fix listed |
| ibm websphere application server | = 7.0.0.31 | No fix listed |
| ibm websphere application server | = 7.0.0.32 | No fix listed |
| ibm websphere application server | = 7.0.0.33 | No fix listed |
| ibm websphere application server | = 7.0.0.34 | No fix listed |
| ibm websphere application server | = 7.0.0.36 | No fix listed |
| ibm websphere application server | = 7.0.0.37 | No fix listed |
| ibm websphere application server | = 7.0.0.38 | No fix listed |
| ibm websphere application server | = 8.0.0.0 | No fix listed |
| ibm websphere application server | = 8.0.0.1 | No fix listed |
| ibm websphere application server | = 8.0.0.2 | No fix listed |
| ibm websphere application server | = 8.0.0.3 | No fix listed |
| ibm websphere application server | = 8.0.0.4 | No fix listed |
| ibm websphere application server | = 8.0.0.5 | No fix listed |
| ibm websphere application server | = 8.0.0.6 | No fix listed |
| ibm websphere application server | = 8.0.0.7 | No fix listed |
| ibm websphere application server | = 8.0.0.8 | No fix listed |
| ibm websphere application server | = 8.0.0.9 | No fix listed |
| ibm websphere application server | = 8.0.0.10 | No fix listed |
| ibm websphere application server | = 8.5.0.0 | No fix listed |
| ibm websphere application server | = 8.5.0.1 | No fix listed |
| ibm websphere application server | = 8.5.0.2 | No fix listed |
| ibm websphere application server | = 8.5.5.0 | No fix listed |
| ibm websphere application server | = 8.5.5.1 | No fix listed |
| ibm websphere application server | = 8.5.5.2 | No fix listed |
| ibm websphere application server | = 8.5.5.3 | No fix listed |
| ibm websphere application server | = 8.5.5.4 | No fix listed |
| ibm websphere application server | = 8.5.5.5 | No fix listed |
References
- PI38302 not-applicable vendor-advisory
- www-01.ibm.com patch vendor-advisory
- 74439 third-party-advisory vdb-entry
- 1032249 third-party-advisory vdb-entry