IBM Websphere Application Server Nd vulnerabilities

2 vulnerabilities

Known vulnerabilities in IBM Websphere Application Server Nd, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2021-20517ibmwebsphere_application_server_nd
EPSS score
1.86%
IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to read and delete arbitrary files on the system. IBM X-Force ID: 198435.6.1CVE-2020-4575ibmwebsphere_application_server+2
EPSS score
0.92%
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.