Vulnerability in Ibm Websphere_message_broker
CVE-2013-5372
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a cra…
EPSS: 0.017 (82.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Websphere_message_broker — versions 6.1, 6.1.0.1, 6.1.0.2
- N/a — versions n/a
Weakness classification (CWE)
References
- IC96473 (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM)
- RHSA-2013:1508 (x_refsource_REDHAT, vendor-advisory)
- SUSE-SU-2013:1677 (vendor-advisory, x_refsource_SUSE)
- psirt@us.ibm.com (x_refsource_CONFIRM)
- ibm-xml4j-cve20135372-dos(86662) (vdb-entry, x_refsource_XF)
- psirt@us.ibm.com (x_refsource_CONFIRM)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- RHSA-2013:1793 (x_refsource_REDHAT, vendor-advisory)
- RHSA-2013:1509 (x_refsource_REDHAT, vendor-advisory)