Lucene search

K
ibmIBM01DB468CCAF53A3D5B112B5D4F8AE3DA136B23B05F0756121EBDCCE14929DA94
HistoryApr 27, 2021 - 1:42 p.m.

Security Bulletin: Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability affects Content Collector for Email

2021-04-2713:42:14
www.ibm.com
5

0.012 Low

EPSS

Percentile

85.6%

Summary

Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability.

Vulnerability Details

CVEID:CVE-2021-20353
**DESCRIPTION:**IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/194882 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
Content Collector for Email 4.0.x

Remediation/Fixes

Product VRM Remediation
Content Collector for Email 4.0.1 Use Content Collector for Email 4.0.1.9 Interim Fix IF009

Workarounds and Mitigations

None

CPENameOperatorVersion
content collectoreq4.0.1

0.012 Low

EPSS

Percentile

85.6%

Related for 01DB468CCAF53A3D5B112B5D4F8AE3DA136B23B05F0756121EBDCCE14929DA94