CVE-2019-4505

Published: Sep 20, 2019Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.

Affected (4)

Products: Ibm: Websphere Application Server, Websphere Virtual Enterprise

Ibm

2 products

Websphere Application Server

Websphere Virtual Enterprise

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	From 8.5.0.0 to 8.5.5.16
Ibm Websphere Application Server	From 9.0.0.0 to 9.0.5.0
Ibm Websphere Virtual Enterprise	Version 7.0
Ibm Websphere Virtual Enterprise	Version 8.0

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/164364

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/964766

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/164364

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/964766

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.