Skip to content
Sign in
5.3 Medium

CVE-2018-1801 IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus…

Description

IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.

Affected products and versions

Product Affected versions Fixed in
Integration Bus 10.0 10.0.0.0 → 10.0.0.13 No fix stated
Integration Bus 9.0 9.0.0.0 → 9.0.0.10 No fix stated
WebSphere Message Broker 8.0 8.0.0.0 → 8.0.0.9 No fix stated
App Connect 11.0 11.0.0.0 → 11.0.0.1 No fix stated

Other CVEs of Integration Bus

The 10 CVEs of Integration Bus →
CVE-2025-36014 IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with… 8.2 High CVE-2024-22356 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1… 4.9 Medium CVE-2023-45176 IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through… 6.2 Medium CVE-2017-1418 IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and… 4.0 Medium
Track this CVE