Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM1E32A722D16ADD66242B79E2C9B1D2DF2E2DFCB82CAEAC8556DE03D4CDC568A7
HistoryApr 27, 2022 - 10:23 a.m.

Security Bulletin: Security vulnerabilities have been identified in IBM WebSphere Application Server used by IBM InfoSphere Master Data Management

2022-04-2710:23:01
www.ibm.com
6
ibm websphere application server
infosphere master data management
xml external entity injection

EPSS

0.002

Percentile

52.4%

JSON

Summary

WebSphere Application Server traditional is vulnerable to an XML External Entity (XXE) Injection vulnerability

Vulnerability Details

CVEID:CVE-2021-20453
**DESCRIPTION:**IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648.
CVSS Base score: 8.2
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/196648 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
InfoSphere Master Data Management 12.0
InfoSphere Master Data Management 11.6

Remediation/Fixes

Principal Product and Version(s) Affected Supporting Product and Version Affected Supporting Product Security Bulletin
IBM InfoSphere Master Data Management v12.0, v11.6
IBM WebSphere Application Server version 9.0.

Security Bulletin: WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453)

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibminfosphere_master_data_managementMatch12.0
OR
ibminfosphere_master_data_managementMatch11.6
VendorProductVersionCPE
ibminfosphere_master_data_management12.0cpe:2.3:a:ibm:infosphere_master_data_management:12.0:*:*:*:*:*:*:*
ibminfosphere_master_data_management11.6cpe:2.3:a:ibm:infosphere_master_data_management:11.6:*:*:*:*:*:*:*

Related

ibm 32
cvelist 1
prion 1
cve 1
nessus 1
nvd 1
ibm
ibm
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2021-20453)
2021-04-22 20:05:04
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2021-20453)
2021-04-26 03:51:10
Security Bulletin: Embedded WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection attack and affects Content Collector for Email
2021-06-01 17:17:34
cvelist
cvelist
CVE-2021-20453
2021-04-20 11:35:14
prion
prion
Xxe
2021-04-20 12:15:00
cve
cve
CVE-2021-20453
2021-04-20 12:15:12
nessus
nessus
IBM WebSphere Application Server 8.0.0.0 <= 8.0.0.15 / 8.5.0.0 <= 8.5.5.19 / 9.0.0.0 <= 9.0.5.7 XXE (CVE-2021-20453)
2021-04-20 00:00:00
nvd
nvd
CVE-2021-20453
2021-04-20 12:15:12

EPSS

0.002

Percentile

52.4%

JSON
Related for 1E32A722D16ADD66242B79E2C9B1D2DF2E2DFCB82CAEAC8556DE03D4CDC568A7
ibm32cvelist1prion1cve1nessus1nvd1