Lucene search
IBM01DB468CCAF53A3D5B112B5D4F8AE3DA136B23B05F0756121EBDCCE14929DA94HistoryApr 27, 2021 - 1:42 p.m.
Security Bulletin: Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability affects Content Collector for Email
2021-04-2713:42:14
www.ibm.com
5
0.012 Low
EPSS
Percentile
85.6%
Summary
Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability.
Vulnerability Details
CVEID:CVE-2021-20353
**DESCRIPTION:**IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/194882 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)
Affected Products and Versions
| Affected Product(s) | Version(s) |
|---|---|
| Content Collector for Email | 4.0.x |
Remediation/Fixes
| Product | VRM | Remediation |
|---|---|---|
| Content Collector for Email | 4.0.1 | Use Content Collector for Email 4.0.1.9 Interim Fix IF009 |
Workarounds and Mitigations
None
| CPE | Name | Operator | Version |
|---|---|---|---|
| content collector | eq | 4.0.1 |
Related
cve
cve
CVE-2021-20353
2021-02-10 17:15:22
nessus
nessus
prion
prion
Xxe
2021-02-10 17:15:00
nvd
nvd
CVE-2021-20353
2021-02-10 17:15:22
cvelist
cvelist
CVE-2021-20353
2021-02-09 00:00:00
zdi
zdi
0.012 Low
EPSS
Percentile
85.6%
Related for 01DB468CCAF53A3D5B112B5D4F8AE3DA136B23B05F0756121EBDCCE14929DA94