Description

IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059.

Remediation

References

CVE-2021-20502

Related Vulnerabilities

WordPress Plugin Google Captcha (reCAPTCHA) by BestWebSoft Security Bypass (1.12)

TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4614)

WordPress Plugin Affiliates Multiple Cross-Site Scripting Vulnerabilities (2.13.1)

TYPO3 Exposed Dangerous Method or Function Vulnerability (CVE-2024-55921)

Python Out-of-bounds Read Vulnerability (CVE-2025-13836)

Severity

High

Classification

CVE-2021-20502 CWE-611 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Tags

Missing Update Known Vulnerabilities