Multiple vulnerabilities in IBM WebSphere Products, including spoofing, remote code execution, and security restriction bypass vectors, could be exploited by a remote attacker. The affected versions are IBM WebSphere Application Server 8.5 and 9.0. IBM has provided fixes and detailed information at specific support pages, which administrators must consult and apply.
Multiple vulnerabilities were identified in IBM WebSphere Products. A remote attacker could exploit some of these vulnerabilities to trigger spoofing, remote code execution and security restriction bypass on the targeted system. Impact Remote Code Execution Security Restriction Bypass Spoofing System / Technologies affected IBM WebSphere Application Server - 8.5 IBM WebSphere Application Server - 9.0 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: https://www.ibm.com/support/pages/node/7274733 https://www.ibm.com/support/pages/node/7274738 https://www.ibm.com/support/pages/node/7274740