Vulnerability in IBM Websphere Application Server
CVE-2011-1322
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_application_server — versions 6.1.0, 6.1.0.0, 6.1.0.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- cve@mitre.org (x_refsource_CONFIRM)