Skip to content
OpenAdvisories
Unscored CVE-2017-1254 EUVD-2017-10270GHSA-v3xc-f323-99x9

IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could …

Published Jul 5, 2017 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.

Affected products

VendorProductAffectedFixed
IBM Security Guardium 10.0, 10.0.1, 10.1, 10.1.2 —

References