CVE-2012-5953

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-20 · updated 2026-06-16
Weakness: CWE-119

Description

IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.

Affected products

IBM WebSphere Message Broker: 6.1, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 (+14)

References

http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
http://www-01.ibm.com/support/docview.wss?uid=swg21623316
https://exchange.xforce.ibmcloud.com/vulnerabilities/80667
http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
http://www-01.ibm.com/support/docview.wss?uid=swg21623316
https://exchange.xforce.ibmcloud.com/vulnerabilities/80667

Get alerted when CVE-2012-5953 or the next vulnerability affects your stack