CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5372

The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.016

EPSS Ranking 80.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2013-5372

Ibm » Websphere Message Broker » Version: 6.1

cpe:2.3:a:ibm:websphere_message_broker:6.1
Ibm » Websphere Message Broker » Version: 6.1.0.1

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.1
Ibm » Websphere Message Broker » Version: 6.1.0.10

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.10
Ibm » Websphere Message Broker » Version: 6.1.0.11

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.11
Ibm » Websphere Message Broker » Version: 6.1.0.2

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.2
Ibm » Websphere Message Broker » Version: 6.1.0.3

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.3
Ibm » Websphere Message Broker » Version: 6.1.0.4

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.4
Ibm » Websphere Message Broker » Version: 6.1.0.5

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.5
Ibm » Websphere Message Broker » Version: 6.1.0.6

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.6
Ibm » Websphere Message Broker » Version: 6.1.0.7

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.7
Ibm » Websphere Message Broker » Version: 6.1.0.8

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.8
Ibm » Websphere Message Broker » Version: 6.1.0.9

cpe:2.3:a:ibm:websphere_message_broker:6.1.0.9
Ibm » Websphere Message Broker » Version: 7.0.

cpe:2.3:a:ibm:websphere_message_broker:7.0.
Ibm » Websphere Message Broker » Version: 7.0.0.1

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1
Ibm » Websphere Message Broker » Version: 7.0.0.2

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2
Ibm » Websphere Message Broker » Version: 7.0.0.3

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3
Ibm » Websphere Message Broker » Version: 7.0.0.4

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4
Ibm » Websphere Message Broker » Version: 7.0.0.5

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5
Ibm » Websphere Message Broker » Version: 7.0.0.6

cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6
Ibm » Websphere Message Broker » Version: 8.0

cpe:2.3:a:ibm:websphere_message_broker:8.0
Ibm » Websphere Message Broker » Version: 8.0.0.1

cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1
Ibm » Websphere Message Broker » Version: 8.0.0.2

cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2
Ibm » Websphere Message Broker » Version: 8.0.0.3

cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2013-5372

Products

Pricing

Contact Us