IBM Business Automation Workflow: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• Critical 9.1
  CVE-2021-23926

  XMLBeans XML Entity Expansion

  The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.

  Apache Software Foundation Apache XMLBeans xmlbeans org.apache.xmlbeans:xmlbeans Debian Ubuntu Maven
  Jan 14, 2021
• Medium 6.3
  CVE-2021-38965

  IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary co…

  IBM FileNet Content Manager
  Jan 17, 2022
• Medium 5.5
  CVE-2021-31811

  A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file

  In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

  Apache Software Foundation Apache PDFBox libpdfbox-java libpdfbox2-java Debian Ubuntu Maven
  Jun 12, 2021
• Medium 5.5
  CVE-2021-31812

  A carefully crafted PDF file can trigger an infinite loop while loading the file

  In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.

  Apache Software Foundation Apache PDFBox libpdfbox-java libpdfbox2-java Debian Ubuntu Maven
  Jun 12, 2021

Revision history

1. 2024-01-17 #2

   Neue Updates von IBM aufgenommen

2. 2022-02-20 #1

   Initiale Fassung

References

• IBM Security Advisory vom 2022-02-20
  https://www.ibm.com/support/pages/node/6557502
• IBM Security Bulletin 7108718 vom 2024-01-18
  https://www.ibm.com/support/pages/node/7108718