CVE-2020-4163

—

CVSS 3.1

7.2 high

EPSS

2%p74

Published

Feb 4, 2020 (Feb 4, 2020)

Modified

Jun 17, 2026

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0, under specialized conditions, could allow an authenticated user to create a maliciously crafted file name which would be misinterpreted as jsp content and executed. IBM X-Force ID: 174397.

Vendors: ibm
Products: websphere application server
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.