CVE-2023-23477: IBM WebSphere Application Server

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.

Affected products

• IBM WebSphere Application Server: version 8.5 only; version 9.0 only

Published 2023-02-03. Last modified 2026-06-17.