High severity8.8NVD Advisory· Published Jun 7, 2021· Updated Jun 17, 2026
CVE-2021-20517
CVE-2021-20517
Description
IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to read and delete arbitrary files on the system. IBM X-Force ID: 198435.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: 8.5 and 9.0
- Range: 8.5
- cpe:2.3:a:ibm:websphere_application_server_nd:*:*:*:*:*:*:*:*Range: >=8.5.0.0,<8.5.5.20
Patches
Vulnerability mechanics
References
2- www.ibm.com/support/pages/node/6456955nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/198435nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.