Skip to content
OpenAdvisories
High · 7.1 CVE-2018-1424 EUVD-2018-12003GHSA-43m3-2gf4-gx9r

IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A rem…

Published Dec 7, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Marketing Platform 9.1.0, 9.1.2, and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 139029.

Affected products

VendorProductAffectedFixed
IBM Marketing Platform 9.1.2, 9.1.0, 10.1 —

References