Unrated severityNVD Advisory· Published Oct 19, 2013· Updated Apr 29, 2026
CVE-2013-5372
CVE-2013-5372
Description
The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.
Affected products
23cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*+ 22 more
- cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.6:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.7:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.8:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.10:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:6.1.0.11:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:8.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:websphere_message_broker:7.0.0.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
12- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- lists.opensuse.org/opensuse-security-announce/2013-11/msg00013.htmlnvd
- rhn.redhat.com/errata/RHSA-2013-1507.htmlnvd
- rhn.redhat.com/errata/RHSA-2013-1508.htmlnvd
- rhn.redhat.com/errata/RHSA-2013-1509.htmlnvd
- rhn.redhat.com/errata/RHSA-2013-1793.htmlnvd
- secunia.com/advisories/56338nvd
- www-01.ibm.com/support/docview.wssnvd
- www-01.ibm.com/support/docview.wssnvd
- www-01.ibm.com/support/docview.wssnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/86662nvd
- www.ibm.com/developerworks/java/jdk/alerts/nvd
News mentions
0No linked articles in our index yet.