Description
由于WebSphere Application Server对用户输入的数据验证存在缺陷，在特定条件下，未经身份验证的远程攻击者通过构造恶意的序列化数据，最终可实现在目标服务器上任意执行代码。
IBM WebSphere Application Server 存在远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secrss.com/articles/51695
https://zhuanlan.zhihu.com/p/604545043
https://cloud.tencent.com/developer/article/2549779
https://www.tenablecloud.cn/plugins/nessus/126052
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/WebSphere/CVE-2020-4276%204362%20IBM%20WebSphere%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://www.bilibili.com/read/cv21849615/
https://blog.nsfocus.net/websphere-cve-2020-4450-0605/
https://www.sentinelone.com/vulnerability-database/cve-2020-4589/
https://nic.cczu.edu.cn/2023/0216/c1305a317365/page.htm
https://avd.aliyun.com/detail?id=AVD-2023-23477
https://www.secevery.com/toBugInfo?id=1811228335834046465
https://www.anquanke.com/post/id/215563
https://www.ibm.com/support/pages/security-bulletin-ibm-websphere-application-server-vulnerable-remote-code-execution-cve-2024-35154
https://nsfocusglobal.com/websphere-application-server-remote-code-execution-vulnerability-cve-2025-36038/