CVE-2018-1801

IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:integration_bus:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:app_connect:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:integration_bus:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:websphere_message_broker:*:*:*:*:*:*:*:*

Information

Published : 2019-02-04 13:29

Updated : 2019-10-09 16:39


NVD link : CVE-2018-1801

Mitre link : CVE-2018-1801


JSON object : View

CWE
CWE-611

Improper Restriction of XML External Entity Reference

Advertisement

dedicated server usa

Products Affected

ibm

  • integration_bus
  • websphere_message_broker
  • app_connect