Lucene search
IBM58CD2A02395167A123D28E9C39D8D642D5C8D4A8EF2100ED8CEE1773D83AB47BHistoryJun 01, 2021 - 5:17 p.m.
Security Bulletin: Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection attack and affects Content Collector for Email
2021-06-0117:17:34
www.ibm.com
9
websphere application server
xml external entity
xxe
content collector
email
vulnerability
ibm x-force
cve-2021-20453
cvss
interim fix if010
EPSS
0.002
Percentile
52.4%
Summary
Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability.
Vulnerability Details
CVEID:CVE-2021-20453
**DESCRIPTION:**IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/196648 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| Content Collector for Email | 4.0.x |
Remediation/Fixes
| Product | VRM | Remediation |
|---|---|---|
| Content Collector for Email | 4.0.1 | Use Content Collector for Email 4.0.1.9 Interim Fix IF010 |
Workarounds and Mitigations
None
Related
ibm
ibm
Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM InfoSphere Master Data Management
2022-04-27 10:23:01
cvelist
cvelist
CVE-2021-20453
2021-04-20 11:35:14
prion
prion
Xxe
2021-04-20 12:15:00
cve
cve
CVE-2021-20453
2021-04-20 12:15:12
nessus
nessus
nvd
nvd
CVE-2021-20453
2021-04-20 12:15:12
EPSS
0.002
Percentile
52.4%
Related for 58CD2A02395167A123D28E9C39D8D642D5C8D4A8EF2100ED8CEE1773D83AB47B