vulnerability

IBM WebSphere Application Server: CVE-2023-23477: IBM WebSphere Application Server is vulnerable to a remote code execution vulnerability (CVE-2023-23477)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Feb 3, 2023

Added

Mar 13, 2023

Modified

Jun 23, 2026

Description

IBM WebSphere Application Server traditional could allow a remote attacker to execute arbitrary code on the system with a specially crafted sequence of serialized objects

Solution

ibm-was-upgrade-latest

References

CVE-2023-23477
https://attackerkb.com/topics/CVE-2023-23477
IBM-ibm106891111
https://www.ibm.com/support/pages/node/6891111
https://exchange.xforce.ibmcloud.com/vulnerabilities/245513
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27577
CWE-94
EUVD-EUVD-2023-27577

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report