Lucene search

K
ibmIBM8207F1B536D92ECB00DD1E46817C4D316660D0D067C6ECD1069AF1DBAC4989D2
HistoryApr 28, 2021 - 8:54 p.m.

Security Bulletin: WebSphere Application Server Traditional, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)

2021-04-2820:54:32
www.ibm.com
7
websphere application server
xml external entity
ibm cloud pak
cve-2021-20453
vulnerability

EPSS

0.002

Percentile

52.4%

Summary

WebSphere Application Server Traditional, which is bundled with IBM Cloud Pak for Applications, is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Affected Product(s) and Version(s) Affected Supportive Product(s) and Version(s)
IBM Cloud Pak for Applications, all

WebSphere Application Server

  • 9.0
  • 8.5
  • 8.0

Remediation/Fixes

WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)

Workarounds and Mitigations

None

EPSS

0.002

Percentile

52.4%

Related for 8207F1B536D92ECB00DD1E46817C4D316660D0D067C6ECD1069AF1DBAC4989D2