XML External Entity Injection Vulnerability in IBM WebSphere Application Server - CVE-2020-4949 (linux)ID: oval:org.secpod.oval:def:69170 | Date: (C)2021-02-15 (M)2023-05-30 |
Class: VULNERABILITY | Family: unix |
The host is installed with WebSphere Application Server Network Deployment 9.x through 9.0.5.6, 8.5.x through 8.5.5.18, 8.0.x through 8.0.0.15 or 7.0.x through 7.0.0.45 and is prone to a XML External Entity Injection (XXE) vulnerability. A flaw is present in the application, which fails to properly handle an issue when processing XML data. Successful exploitation allows an attacker to expose sensitive information or consume memory resources.
Product: |
IBM WebSphere Application Server Network Deployment 7.0 |
IBM WebSphere Application Server Network Deployment 8.0 |
IBM WebSphere Application Server Network Deployment 9.0 |
IBM WebSphere Application Server Network Deployment 8.5 |