CVE-2011-1317

Memory leak in com.ibm.ws.jsp.runtime.WASJSPStrBufferImpl in the JavaServer Pages (JSP) component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) by sending many JSP requests that trigger large responses.

• CWE-399

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM19500Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg27014463Patch, Vendor Advisory

Published

Mar 8, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-1311The Security component in IBM WebSphere Application Server (…
• CVE-2011-1312The Administrative Console component in IBM WebSphere Applic…
• CVE-2011-1313Double free vulnerability in IBM WebSphere Application Serve…
• CVE-2011-1314The Service Integration Bus (SIB) messaging engine in IBM We…
• CVE-2011-1315Memory leak in the messaging engine in IBM WebSphere Applica…
• CVE-2011-1316The Session Initiation Protocol (SIP) Proxy in the HTTP Tran…
• CVE-2011-1318Memory leak in org.apache.jasper.runtime.JspWriterImpl.respo…
• CVE-2011-1319The Security component in IBM WebSphere Application Server (…
• CVE-2011-1320The Security component in IBM WebSphere Application Server (…
• CVE-2011-1321The AuthCache purge implementation in the Security component…
• CVE-2011-1322The SOAP with Attachments API for Java (SAAJ) implementation…
• CVE-2011-1323Yamaha RTX, RT, SRT, RTV, RTW, and RTA series routers with f…