Critical severity9.8NVD Advisory· Published Jun 5, 2020· Updated Jun 17, 2026
CVE-2020-4448
CVE-2020-4448
Description
IBM WebSphere Application Server Network Deployment 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to execute arbitrary code on the system with a specially-crafted sequence of serialized objects from untrusted sources. IBM X-Force ID: 181228.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: 7.0, 8.0, 8.5, and 9.0
cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*range: >=8.5.0.0,<8.5.5.18
- (no CPE)range: 7.0
cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:websphere_virtual_enterprise:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_virtual_enterprise:8.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/pages/node/6220336nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/181228nvdVDB EntryVendor Advisory
- www.zerodayinitiative.com/advisories/ZDI-20-688/nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.