CVE-2017-1254
published 2017-07-05CVE-2017-1254: IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this…
PriorityP338high7.1CVSS 3.0
AVNACLPRLUINSUCHINAL
EPSS
1.59%
72.9th percentile
IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | security_guardium | — | — |
| ibm | security_guardium | — | — |
| ibm | security_guardium | — | — |
| ibm | security_guardium | — | — |
CVSS provenance
nvdv3.07.1HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
nvdv2.05.5MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.ibm.com/support/docview.wss?uid=swg22004463http://www.securityfocus.com/bid/99366https://exchange.xforce.ibmcloud.com/vulnerabilities/124634http://www.ibm.com/support/docview.wss?uid=swg22004463http://www.securityfocus.com/bid/99366https://exchange.xforce.ibmcloud.com/vulnerabilities/124634
2017-07-05
Published