CVE-2020-4590: IBM WebSphere Application Server

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM WebSphere Application Server Liberty 17.0.0.3 through 20.0.0.9 running oauth-2.0 or openidConnectServer-1.0 server features is vulnerable to a denial of service attack conducted by an authenticated client. IBM X-Force ID: 184650.

Affected products

• IBM WebSphere Application Server: from 17.0.0.3, up to and including 20.0.0.9

Published 2020-09-21. Last modified 2026-06-17.