Security Bulletin: IBM Security Access Manager version 9.0.3.0 appliances are affected by an XML External Entity injection vulnerability (CVE-2017-1477)

Summary IBM Security Access Manager has addressed the following XML External Entity Injection vulnerability, which affects the IBM Security Access Manager version 9.0.3.0 appliance. Vulnerability Details CVEID: CVE-2017-1477 DESCRIPTION: IBM Security Access Manager Appliance is vulnerable to a XM...

CVE-2017-1477

Summary: CVE-2017-1477 affects IBM Security Access Manager Appliance 9.0.3.0, where an XML External Entity (XXE) vulnerability exists when processing XML data, potentially exposing sensitive information or exhausting memory resources. Affected product/versions (per sources): IBM Security Access M...