Security Vulnerabilities in Apache FOP and Apache Batik affect IBM WebSphere Portal

  • 14 Aug, 2017

XML external entity (XXE) security vulnerabilities in Apache FOP and Apache Batik affect IBM WebSphere Portal.

Apache FOP could allow a remote authenticated attacker to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data. By using a specially-crafted SVG file. A remote attacker could exploit this vulnerability to obtain sensitive information or possibly cause a denial of service.

Read the security buletin here

Next

Related Posts

Proud to be an HCL Ambassador 2021

  • 15 Dec, 2020

​If you have a problem, and no-one else can help, and if you can find them, maybe you can ask an HCL Ambassador… !(http://www.mysphere.com.br/wp-content/uploads/2020/12/HCLAmbassaborlight4x.png) See

Proud to be an HCL Ambassador 2021Read More

WebSphere Application Server Configuration Comparison Tool

  • 06 Sep, 2019

The Configuration Comparison Tool (CCT) is a lightweight wsadmin script and Python report generation script which will produce HTML reports on configuration settings for the following types of resourc

WebSphere Application Server Configuration Comparison ToolRead More

IBM Support Community for Digital Experience Products

  • 07 Nov, 2017

In the next week Digital Experience products: • WebSphere Portal • Web Content Manager • Digital Experience Patterns • Digital Experience on Cloud • Forms Experience Builder • Forms Experience Builde

IBM Support Community for Digital Experience ProductsRead More