| Package | Affected versions | Patched versions |
|---|---|---|
| websphere application server | = 6.1.0= 6.1.0.0= 6.1.0.1= 6.1.0.11= 6.1.0.12= 6.1.0.15= 6.1.0.17= 6.1.0.19= 6.1.0.2= 6.1.0.21= 6.1.0.23= 6.1.0.25= 6.1.0.27= 6.1.0.29= 6.1.0.3= 6.1.0.31= 6.1.0.33= 6.1.0.35= 6.1.0.5= 6.1.0.7= 6.1.0.9= 7.0= 7.0.0.1= 7.0.0.11= 7.0.0.13= 7.0.0.2= 7.0.0.3= 7.0.0.4= 7.0.0.5= 7.0.0.6= 7.0.0.7= 7.0.0.8= 7.0.0.9 |
The SOAP with Attachments API for Java (SAAJ) implementation in the Web Services component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via encrypted SOAP messages.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free