CVE-2013-6325

IBM WebSphere Application Server DoS via Crafted Web Services Request

Title source: llm
STIX 2.1

Description

IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service (resource consumption) via a crafted request to a web services endpoint.

References (5)

Core 5
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21661323
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PM99450
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21661325
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/88906
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21669554

Scores

EPSS 0.0207
EPSS Percentile 79.1%

Details

CWE
CWE-20
Status published
Products (40)
ibm/websphere_application_server 8.0.0.0
ibm/websphere_application_server 8.0.0.1
ibm/websphere_application_server 8.0.0.2
ibm/websphere_application_server 8.0.0.3
ibm/websphere_application_server 8.0.0.4
ibm/websphere_application_server 8.0.0.5
ibm/websphere_application_server 8.0.0.6
ibm/websphere_application_server 8.0.0.7
ibm/websphere_application_server 7.0
ibm/websphere_application_server 7.0.0.1
... and 30 more
Published Jan 16, 2014
Tracked Since Feb 18, 2026