IBM WebSphere Application Server 8.5 and 9.0 is...
Critical severity
Unreviewed
Published
May 11, 2023
to the GitHub Advisory Database
•
Updated Apr 4, 2024
Description
Published by the National Vulnerability Database
May 11, 2023
Published to the GitHub Advisory Database
May 11, 2023
Last updated
Apr 4, 2024
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 249185.
References