IBM WebSphere Virtual Enterprise vulnerabilities

8 CVEs affecting IBM WebSphere Virtual Enterprise, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-4575, published 2020-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-4448, published 2020-06-05. Critical severity, CVSS 9.8. EPSS: 12.2% chance of exploitation in the next 30 days. IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized…
CVE-2019-4505, published 2019-09-20. Medium severity, CVSS 5.3. EPSS: 2.4% chance of exploitation in the next 30 days. IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the…
CVE-2015-1932, published 2015-08-22. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise before 7.0.0.7 allow remote attackers to obtain potentially…
CVE-2013-6323, published 2014-05-01. Low severity, CVSS 3.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere…
CVE-2013-5425, published 2013-11-18. Low severity, CVSS 3.5. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject…
CVE-2020-4575, published 2020-08-27. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
CVE-2019-4030, published 2019-03-06. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2015-1946, published 2015-07-14. Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days. IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user…