CVE-2015-1920 in WebSphere Application Server
Summary
IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
02/19/2015
Disclosure
05/19/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75197 | IBM WebSphere Application Server Service access control | 284 | Not defined | Official fix | CVE-2015-1920 |