Xxe

2019-02-0421:29:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.6%

JSON

IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751.

CPENameOperatorVersion
security_access_managerge7.0.1
security_access_managerle7.0.1.10

CPE	Name	Operator	Version
	security_access_manager	ge	7.0.1
	security_access_manager	le	7.0.1.10

References

www.ibm.com/support/docview.wss?uid=ibm10796380

exchange.xforce.ibmcloud.com/vulnerabilities/153751