IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.
2024-10-16T17:15:16.750
2024-10-21T13:41:20.463
Analyzed
CVSSv3.1: 5.5 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ibm | websphere_application_server | ≤ 8.5.5.26 | Yes |
| Application | ibm | websphere_application_server | ≤ 9.0.5.21 | Yes |
| Operating System | hp | hp-ux | - | No |
| Operating System | ibm | aix | - | No |
| Operating System | ibm | i | - | No |
| Operating System | ibm | z\/os | - | No |
| Operating System | linux | linux_kernel | - | No |
| Operating System | microsoft | windows | - | No |
| Operating System | oracle | solaris | - | No |