Vulnerability Details CVE-2020-4365
IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 178964.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 41.3%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 4.0
References
Products affected by CVE-2020-4365
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.0
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.1
-
cpe:2.3:a:ibm:websphere_application_server:8.5.0.2
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.0
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.1
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.10
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.11
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.12
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.13
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.14
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.15
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.16
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.17
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.2
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.3
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.4
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.5
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.6
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.7
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.8
-
cpe:2.3:a:ibm:websphere_application_server:8.5.5.9
-
cpe:2.3:o:hp:hp-ux:-
-
cpe:2.3:o:ibm:aix:-
-
cpe:2.3:o:ibm:i:-
-
cpe:2.3:o:ibm:z/os:-
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-
-
cpe:2.3:o:oracle:solaris:-