CVE-2012-5953
Estado: ModificadaMedia (4.3)—
IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
- Puntuación base: 4.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.32%
- Percentil entre todas las CVEs puntuadas: 70
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-119
Referencias
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
- http://www-01.ibm.com/support/docview.wss?uid=swg21623316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80667
- http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015
- http://www-01.ibm.com/support/docview.wss?uid=swg21623316
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80667
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-5953",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@us.ibm.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2013-02-20T12:09:22.427",
"references": [
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21623316",
"tags": [
"Vendor Advisory"
],
"source": "psirt@us.ibm.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80667",
"source": "psirt@us.ibm.com"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1PM75015",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21623316",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/80667",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.6, and 8.0 before 8.0.0.2, when the Parse Query Strings option is enabled on an HTTPInput node, allows remote attackers to cause a denial of service (infinite loop) via a crafted query string."
},
{
"lang": "es",
"value": "IBM WebSphere Message Broker v6.1 antes v6.1.0.12, v7,0 antes de v7.0.0.6 y 8,0 antes de 8.0.0.2, cuando la opción de análisis de cadenas está habilitada en un nodo HTTPInput, permite a atacantes remotos provocar una denegación de servicio (bucle infinito) a través de una cadena de consulta hecha a mano ."
}
],
"lastModified": "2026-06-16T23:47:37.510",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69C3EE89-7F3F-4578-9EC8-7E03621D0273"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D74569CA-0038-4E8F-82DA-2B1938E3F67D"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59D58AC0-EA2F-4DC4-82C9-C534497EFBD4"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95F2360D-24D4-42C2-A0DA-0EC60827E1F1"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE8A9C81-A697-4FD3-8B1D-3C7CFE8D7316"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B1FE3CA-0AE3-44D0-A09D-38731BE07E78"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "66F5CA02-9FAA-4E4F-85AD-159C6634979F"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10C438DC-71DA-4A64-AE9E-B55B0FAFE7D9"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D7EE1CD-4ED8-45B4-892D-E4A7A96EF131"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "533721B3-7F21-4552-BDD1-A871CE5321DE"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9A05E66-96E8-49C9-B0AA-192090DF3618"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:6.1.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C861ECD2-7CEC-4593-AC9F-2D610A213A48"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "240F8B7E-D5F2-4450-97D2-45A4E427170D"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F76DCB43-6AFF-4C58-B646-423A6CECCA14"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BC76D23-2211-40D8-8115-382BD7BA6ABD"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BD879AA3-9887-4C8F-BEDB-50A39D193C4C"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA01CDC5-5725-460F-9DAD-B7F8094FAA69"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:7.0.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1DF45543-2C8E-414B-AB66-10D4B59DDF5C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F93BF57-FD4F-456C-8DFD-CEF8B5AEF35D"
},
{
"criteria": "cpe:2.3:a:ibm:websphere_message_broker:8.0.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B859DAA9-1B0E-47CE-813D-108776C3B239"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@us.ibm.com"
}