CVE-2024-45072
published 2024-10-16CVE-2024-45072: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could…
medium5.5CVSS 3.1
AVNACLPRHUINSUCHINAL
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_application_server | — | — |
| ibm | websphere_application_server | 8.5.0.0 – 8.5.5.26 | — |
| ibm | websphere_application_server | 9.0.0.0 – 9.0.5.21 | — |