8.8
CVE-2017-1731
- EPSS 1.75%
- Veröffentlicht 30.01.2018 18:29:00
- Zuletzt bearbeitet 21.11.2024 03:22:16
- Quelle psirt@us.ibm.com
- Teams Watchlist Login
- Unerledigt Login
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Application Server Version >= 7.0.0.0 <= 7.0.0.43
Ibm ≫ Websphere Application Server Version >= 8.0.0.0 <= 8.0.0.14
Ibm ≫ Websphere Application Server Version >= 8.5.0.0 <= 8.5.5.13
Ibm ≫ Websphere Application Server Version >= 9.0.0.0 <= 9.0.0.6
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.75% | 0.819 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|