cbcvebase.
CVE-2021-20453
published 2021-04-20

CVE-2021-20453: IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker…

high8.2CVSS 3.1
AVNACLPRNUINSUCHINAL
IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648.

Affected

6 ranges
VendorProductVersion rangeFixed in
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server——
ibmwebsphere_application_server>= 8.0.0.0 < 8.0.0.158.0.0.15
ibmwebsphere_application_server>= 8.5.0.0 < 8.5.5.208.5.5.20
ibmwebsphere_application_server>= 9.0.0.0 < 9.0.5.89.0.5.8