CVE-2018-1801
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2018
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Integration Bus
- Vendor
- IBM
- Product
- Integration Bus
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 9.0.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.0.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 9.0.0.10 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 10.0.0.13 | affected | Unavailable | Unavailable | Unavailable | None listed |
WebSphere Message Broker
- Vendor
- IBM
- Product
- WebSphere Message Broker
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 8.0.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 8.0.0.9 | affected | Unavailable | Unavailable | Unavailable | None listed |
App Connect
- Vendor
- IBM
- Product
- App Connect
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 11.0.0.0 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 11.0.0.1 | affected | Unavailable | Unavailable | Unavailable | None listed |