CVE-2017-1322

2017-06-2716:00:00

ibm

www.cve.org

8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.2%

JSON

IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918.

CNA Affected

[
  {
    "product": "API Connect",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "5.0.6.0"
      }
    ]
  }
]