CVE-2012-5953

Published: Feb 20, 2013Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.

Affected (20)

Products: Ibm: Websphere Message Broker

Ibm

1 product

Websphere Message Broker

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Message Broker	Version 6.1.0.10
Ibm Websphere Message Broker	Version 6.1.0.11
Ibm Websphere Message Broker	Version 6.1.0.1
Ibm Websphere Message Broker	Version 6.1.0.2
Ibm Websphere Message Broker	Version 6.1.0.3
Ibm Websphere Message Broker	Version 6.1.0.4
Ibm Websphere Message Broker	Version 6.1.0.5
Ibm Websphere Message Broker	Version 6.1.0.6
Ibm Websphere Message Broker	Version 6.1.0.7
Ibm Websphere Message Broker	Version 6.1.0.8
Ibm Websphere Message Broker	Version 6.1.0.9
Ibm Websphere Message Broker	Version 6.1

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Message Broker	Version 7.0.0.1
Ibm Websphere Message Broker	Version 7.0.0.2
Ibm Websphere Message Broker	Version 7.0.0.3
Ibm Websphere Message Broker	Version 7.0.0.4
Ibm Websphere Message Broker	Version 7.0.0.5
Ibm Websphere Message Broker	Version 7.0.