WebSphere Application Server Traditional, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)
Refer to the security bulletin(s) listed in the Remediation/Fixes section
Principal Affected Product(s) and Version(s) | Affected Supportive Product(s) and Version(s) |
---|---|
IBM Cloud Pak for Applications, all |
WebSphere Application Server
None