Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0:*:*:*:*:*:*:*

part: a version: 7.0 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductWebsphere Virtual Enterprise (906b4aa5-8909-55a0-b7af-3607f645b58c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-4575 vulnerable 2026-06-08 05:25:59.560457 Details available
MEDIUM (4.7)
IBM WebSphere Application Server ND 8.5 and 9.0, and IBM WebSphere Virtual Enterprise 7.0 and 8.0 are vulnerable to cross-site scripting when High Availability Deployment Manager is configured.
Published: 2020-08-27T12:40:34.014Z
Updated: 2024-09-16T19:35:46.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-4448 vulnerable 2026-06-08 05:25:59.357371 Details available
CRITICAL (9.8)
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228.
Published: 2020-06-05T12:55:17.738Z
Updated: 2024-09-16T20:58:31.822Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4505 vulnerable 2026-06-08 05:13:57.253130 Details available
LOW (3.7)
IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 Network Deployment could allow a remote attacker to obtain sensitive information, caused by sending a specially-crafted URL. This can lead the attacker to view any file in a certain directory. IBM X-Force ID: 164364.
Published: 2019-09-20T15:50:11.775Z
Updated: 2024-09-17T02:15:59.412Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-4030 vulnerable 2026-06-08 05:13:56.671863 Details available
MEDIUM (5.4)
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 155946.
Published: 2019-03-06T20:00:00.000Z
Updated: 2024-09-16T22:30:35.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-1946 vulnerable 2026-06-08 05:06:26.953010 Details available
IBM WebSphere Application Server (WAS) 8.5 before 8.5.5.6, and WebSphere Virtual Enterprise 7.0 before 7.0.0.6 for WebSphere Application Server (WAS) 7.0 and 8.0, does not properly implement user roles, which allows local users to gain privileges via unspecified vectors.
Published: 2015-07-14T17:00:00.000Z
Updated: 2024-08-06T05:02:41.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6323 vulnerable 2026-06-08 05:04:55.926542 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-5425 vulnerable 2026-06-08 05:04:51.653031 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.