CVE-2023-23477: IBM WebSphere Application Server code execution
IBM WebSphere Application Server 8.5 and 9.0 traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects. IBM X-Force ID: 245513.
Other sources
IBM WebSphere Application Server traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23477?
The severity of CVE-2023-23477 is critical.
Which versions of IBM WebSphere Application Server are affected by CVE-2023-23477?
IBM WebSphere Application Server 8.5 and 9.0 are affected by CVE-2023-23477.
How can a remote attacker exploit CVE-2023-23477?
A remote attacker can exploit CVE-2023-23477 by sending a specially crafted sequence of serialized objects.
What is the IBM X-Force ID for CVE-2023-23477?
The IBM X-Force ID for CVE-2023-23477 is 245513.
Where can I find more information about CVE-2023-23477?
You can find more information about CVE-2023-23477 at the following references: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/245513), [Link 2](https://www.ibm.com/support/pages/node/6891111).