5.3
Moyenne
CVE-2018-1801 IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus…
Description
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Integration Bus 10.0 | 10.0.0.0 → 10.0.0.13 | Pas de correctif indiqué |
| Integration Bus 9.0 | 9.0.0.0 → 9.0.0.10 | Pas de correctif indiqué |
| WebSphere Message Broker 8.0 | 8.0.0.0 → 8.0.0.9 | Pas de correctif indiqué |
| App Connect 11.0 | 11.0.0.0 → 11.0.0.1 | Pas de correctif indiqué |
Autres CVE de Integration Bus
Les 10 CVE de Integration Bus →
CVE-2025-36014
IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.5 is vulnerable to code injection by a privileged user with…
8.2
Élevée
CVE-2024-22356
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.9.0 and IBM Integration Bus for z/OS 10.1…
4.9
Moyenne
CVE-2023-45176
IBM App Connect Enterprise 11.0.0.1 through 11.0.0.23, 12.0.1.0 through 12.0.10.0 and IBM Integration Bus 10.1 through…
6.2
Moyenne
CVE-2017-1418
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and…
4.0
Moyenne