Skip to content
OpenAdvisories
Unscored CVE-2017-1527 EUVD-2017-10543GHSA-mhxg-pcmj-chvj

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A re…

Published Sep 26, 2017 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Business Process Manager Advanced

Description

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156.

Affected products

VendorProductAffectedFixed
IBM Business Process Manager Advanced 7.5, 7.5.0.1, 7.5.1, 7.5.1.1, 7.5.1.2, 8.0, 8.0.1, 8.0.1.1, 8.0.1.2, 8.5, 8.5.0.1, 8.5.5, 8.0.1.3, 8.5.6, 8.5.0.2, 8.5.7, 8.5.7.CF201609, 8.5.6.1, 8.5.6.2, 8.5.7.CF201606, 8.5.7.CF201612, 8.5.7.CF201703, 8.5.7.CF201706 —

References