Security Bulletin: WebSphere Application Server in IBM Cloud is vulnerable to an XML External Entity (XXE) Injection vulnerability (CVE-2021-20353)

Summary

WebSphere Application Server is shipped as a component of IBM WebSphere Application Server in IBM Cloud. Information about security vulnerabilities affecting WebSphere Application Server have been published in a security bulletin.

Vulnerability Details

Refer to the security bulletin(s) listed in the Remediation/Fixes section

Affected Products and Versions

Principal Product and Version(s)

|

Affected Supporting Product and Version

—|—
IBM WebSphere Application Server in IBM Cloud, all versions| WebSphere Application Server:

• 9.0
• 8.5

Remediation/Fixes

Please consult the following security bulletin for vulnerability details and information about fixes

• WebSphere Application Server is vulnerable to an XML External Entity (XXE) Injection Vulnerability (CVE-2020-20353)

Please see Updating your environment in the KnowlegeCenter for information on applying service.

Workarounds and Mitigations

None