Lucene search

K
ibmIBME563C62B06D57DEDCEA1601755988B7560949F0351FA78B17C8A0432F96AF9C8
HistoryApr 26, 2021 - 3:51 a.m.

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI (CVE-2021-20453)

2021-04-2603:51:10
www.ibm.com
13
ibm
websphere
tivoli
netcool/omnibus
webgui
security vulnerability
xml external entity injection
cve-2021-20453

EPSS

0.002

Percentile

52.4%

Summary

Websphere Application Server (WAS) is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about a security vulnerability affecting WAS has been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s) Affected Supporting Product and Version
WebGUI 8.1.0 GA and FP Websphere Application Server V8.5 and V9

Remediation/Fixes

Please consult the security bulletin WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20453) for vulnerability details and information about fixes.

Workarounds and Mitigations

None

EPSS

0.002

Percentile

52.4%

Related for E563C62B06D57DEDCEA1601755988B7560949F0351FA78B17C8A0432F96AF9C8