CVE-2020-4629

LOW

3.3

CVSS Score

Published: September 30, 2020 at 02:35 PM UTC

Updated: June 17, 2026 at 03:20 AM UTC

4 products affected across 1 vendorWebSphere Application ServerAIXI· also runs on 4 platforms

Using WebSphere Application Server by IBM?

Get instant alerts when new vulnerabilities affect WebSphere Application Server - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

LOW3.3

Exploit prediction

EPSS 0.3%

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

WebSphere Application Server · IBM

95%

7.0.0.0 ≤ v ≤ 7.0.0.458.0.0.0 ≤ v ≤ 8.0.0.158.5.0.0 ≤ v ≤ 8.5.5.189.0.0.0 ≤ v ≤ 9.0.5.57.0 8.0 8.5 9.0

hp-hp-ux (environment) · ibm-aix (environment) · ibm-i (environment) · ibm-z-os (environment) · linux-linux-kernel (environment) · microsoft-windows (environment) · oracle-solaris (environment)

AIX · IBMdevice

80%

All versions

I · IBMdevice

80%

All versions

Z /os · IBMdevice

80%

All versions