CVE-2012-5953

IBM WebSphere Message Broker 6.1-7.0 - Denial of Service via Crafted Query String

Title source: llm
STIX 2.1

Description

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21623316
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/80667
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015

Scores

EPSS 0.0132
EPSS Percentile 67.5%

Details

CWE
CWE-119
Status published
Products (20)
ibm/websphere_message_broker 6.1
ibm/websphere_message_broker 6.1.0.1
ibm/websphere_message_broker 6.1.0.2
ibm/websphere_message_broker 6.1.0.3
ibm/websphere_message_broker 6.1.0.4
ibm/websphere_message_broker 6.1.0.5
ibm/websphere_message_broker 6.1.0.6
ibm/websphere_message_broker 6.1.0.7
ibm/websphere_message_broker 6.1.0.8
ibm/websphere_message_broker 6.1.0.9
... and 10 more
Published Feb 20, 2013
Tracked Since Feb 18, 2026