Vulnerability in IBM Websphere Application Server

CVE-2010-2328

The HTTP Channel in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.11 allows remote attackers to cause a denial of service (NullPointerException) via a large amount of chunked data that uses gzip compression.

EPSS: 0.011 (62.5th percentile) — read the EPSS interpretation.

Affected products

Ibm Websphere_application_server — versions 7.0, 7.0.0.3, 7.0.0.5
N/a — versions n/a

References

cve@mitre.org (vendor-advisory, x_refsource_AIXAPAR)
cve@mitre.org (vendor-advisory, Patch, x_refsource_AIXAPAR)