Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-19020
HistoryApr 17, 2024 - 12:00 a.m.

IBM WebSphere Application Server and IBM WebSphere Application Server Liberty XML External Entity Injection Vulnerability

2024-04-1700:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
ibm
websphere
application server
liberty
xml
external entity injection
vulnerability
international business machines
javaee
web services
open liberty
exploited
attacker
sensitive information
memory resources
server-side request forgery.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

IBM WebSphere Application Server (WAS) and IBM WebSphere Application Server Liberty are both products of International Business Machines (IBM).IBM WebSphere Application Server is an application server IBM WebSphere Application Server is an application server product. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform.IBM WebSphere Application Server Liberty is a Java application server built on top of the Open Liberty project. An XML external entity injection vulnerability exists in IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, which can be exploited by an attacker to obtain sensitive information, consume memory resources, or perform server-side request forgery attacks.

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CNVD-2024-19020