Lucene search

K
ibmIBM14E8A20F3739190733B1BF57D1DA6CE5ACB7645F7CEE6F8956CC294AF06D2305
HistoryApr 16, 2021 - 9:35 a.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server, which is a required product for IBM Tivoli Network Manager IP Edition (CVE-2021-20353)

2021-04-1609:35:33
www.ibm.com
10
ibm websphere application server
ibm tivoli network manager
security vulnerability
xml external entity injection

EPSS

0.012

Percentile

85.6%

Summary

IBM WebSphere Application Server is a required product for IBM Tivoli Network Manager version 4.2. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Affected Product(s) Version(s)
ITNM 4.2.0

Remediation/Fixes

Affected Product(s) Version(s) Remediation
ITNM 4.2.0

WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability

See section: For V8.5.0.0 through 8.5.5.19:

Workarounds and Mitigations

None

EPSS

0.012

Percentile

85.6%

Related for 14E8A20F3739190733B1BF57D1DA6CE5ACB7645F7CEE6F8956CC294AF06D2305