← Back to browse · API

CVE-2018-1567

Severity
CRITICAL
CVSS
9.8
EPSS
0.0376
Risk score
40.52
CISA KEV
No
PoC
No
Published
2018-09-07
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2018-12146, GHSA-H77G-CH56-XFC5
Products
IBM:WebSphere Application Server 7.0, IBM:WebSphere Application Server 8.0, IBM:WebSphere Application Server 8.5, IBM:WebSphere Application Server 9.0
Sources
euvd EUVD-2018-12146

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow remote attackers to execute arbitrary Java code through the SOAP connector with a serialized object from untrusted sources. IBM X-Force ID: 143024.

References