VULNERABILITY INTELLIGENCE

CVE-2015-1920

CVSS score10 HIGH
EPSS probability6.84%
CISA KEVNot currently listed
Published2015-05-20
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.

Weakness classification

  • CWE-284: Improper Access Control

Primary references