Description
The Remote Document Conversion Service (DCS) in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF16, and 8.5.0 through CF05 allows remote attackers to cause a denial of service (memory consumption) via crafted requests.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032189
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21701566
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/74216
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1PI37356
Scores
EPSS
0.0346
EPSS Percentile
87.8%
Details
CWE
CWE-399
Status
published
Products (17)
ibm/websphere_portal
6.1.0.0
ibm/websphere_portal
6.1.0.1
ibm/websphere_portal
6.1.0.2
ibm/websphere_portal
6.1.0.3
ibm/websphere_portal
6.1.0.4
ibm/websphere_portal
6.1.0.5
ibm/websphere_portal
6.1.0.6
ibm/websphere_portal
6.1.5.0
ibm/websphere_portal
6.1.5.1
ibm/websphere_portal
6.1.5.2
... and 7 more
Published
Apr 27, 2015
Tracked Since
Feb 18, 2026