8.8high
CVE-2017-1731
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console.
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.8%
percentile 87%
Public exploits
0
none known
Summary
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could provide weaker than expected security when using the Administrative Console. An authenticated remote attacker could exploit this vulnerability to possibly gain elevated privileges.
Exploit prediction (EPSS)
2.84% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 8.8 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Affected products
- IBM WebSphere Application Server
References
- exchange.xforce.ibmcloud.com /vulnerabilities/134912 · x_refsource_MISC, x_transferred
- www-01.ibm.com /support/docview.wss?uid=swg22012345&myns=swgws&mynp=OCSSEQTP&mync=R&cm_sp=swgws-_-OCSSEQT · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1040356 · vdb-entry, x_refsource_SECTRACK, x_transferred
- securityfocus.com /bid/102911 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2017-1731
- NVD: CVE-2017-1731
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.