CVE-2011-1322 — IBM Websphere Application Server vulnerability

CWE-3993 documents3 sources

Severity

5.0MEDIUMNVD

EPSS

0.5%

top 32.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Websphere Application Server

Timeline

PublishedMar 8

Latest updateMay 17

Description

The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDibm/websphere_application_server33 versions+32

🔴Vulnerability Details

GHSA

GHSA-gwgf-gp64-2m7v: The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6↗2022-05-17

▶

CVEList

CVE-2011-1322: The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6↗2011-03-08

▶