CVE-2024-45086
published 2024-11-04CVE-2024-45086: IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could…
medium5.5CVSS 3.1
AVNACLPRHUINSUCHINAL
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | websphere_application_server | — | — |
| ibm | websphere_application_server | >= 8.5.0.0 < 8.5.5.27 | 8.5.5.27 |
| ibm | websphere_application_server | >= 9.0.0.0 < 9.0.5.22 | 9.0.5.22 |