Lucene search
+L

3 matches found

OSV
OSV
added 2018/09/28 1:29 p.m.3 views

CVE-2018-1702

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM...

7.1CVSS5.8AI score0.01853EPSS
SaveExploits0References2
CVE
CVE
added 2018/09/28 1:0 p.m.54 views

CVE-2018-1702

IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1, and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are affected by a XML External Entity Injection (XXE) when processing XML data. A remote attacker could exploit this to disclose sensitive information or exhaust memory resources. Root cause is XXE in XML ...

7.1CVSS6.8AI score0.01853EPSS
SaveExploits0References2Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2018/08/03 10:53 a.m.24 views

Security Bulletin: XML Entity Expansion vulnerability (CVE-2018-1702) affects IBM Platform Symphony, IBM Spectrum Symphony

Summary XML Entity Expansion vulnerability CVE-2018-1702 affects IBM Platform Symphony, IBM Spectrum Symphony Vulnerability Details CVEID: CVE-2018-1702 DESCRIPTION: IBM Spectrum Symphony is vulnerable to a XML External Entity Injection XXE attack when processing XML data. A remote attacker could...

7.1CVSS0.6AI score0.01853EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder