Skip to content
OpenAdvisories
High · 7.5 CVE-2020-4643 EUVD-2020-25890GHSA-j62j-249h-8r55

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML …

Published Sep 21, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information. IBM X-Force ID: 185590.

Affected products

VendorProductAffectedFixed
IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 —

References