Xxe

2018-02-2116:29:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.3%

JSON

XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.

CPENameOperatorVersion
forms_experience_buildereq8.5.1
forms_experience_buildereq8.5
forms_experience_buildereq8.6.0

Name	Operator	Version
forms_experience_builder	eq	8.5.1
forms_experience_builder	eq	8.5
forms_experience_builder	eq	8.6.0

References

www-01.ibm.com/support/docview.wss?uid=swg21988727

exchange.xforce.ibmcloud.com/vulnerabilities/112088