CVE-2021-29754

HIGH 8.8CVE-2021-29754 · Published 11/06/2021 · updated 17/06/2026

In short

CVE-2021-29754 is a HIGH (CVSS 8.8) vulnerability affecting websphere application server (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.74%, higher than 54.8% of all vulnerabilities.
Fix: update to 7.0.0.45, 8.0.0.15, 8.5.5.20, 9.0.5.8 or later.

Package	Affected versions	Patched versions
websphere application server ibm	`≥ 7.0.0.0, < 7.0.0.45≥ 8.0.0.0, < 8.0.0.15≥ 8.5.0.0, < 8.5.5.20≥ 9.0.0.0, < 9.0.5.8`	`7.0.0.458.0.0.158.5.5.209.0.5.8`

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a privilege escalation vulnerability when using the SAML Web Inbound Trust Association Interceptor (TAI). IBM X-Force ID: 202006.

References

exchange.xforce.ibmcloud.com/vulnerabilities/202006 · VDB Entry
ibm.com/support/pages/node/6462627 · Vendor Advisory

More vulnerabilities in websphere application server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

websphere application server

ibm

≥ 7.0.0.0, < 7.0.0.45≥ 8.0.0.0, < 8.0.0.15≥ 8.5.0.0, < 8.5.5.20≥ 9.0.0.0, < 9.0.5.8

7.0.0.458.0.0.158.5.5.209.0.5.8

More vulnerabilities in websphere application server

See all →