Skip to content
OpenAdvisories
High · 7.1 CVE-2018-1835 EUVD-2018-12414GHSA-rp2x-6xfp-m8m3

IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data…

Published Nov 2, 2018 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Daeja ViewONE Professional, Standard & Virtual 5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150514.

Affected products

VendorProductAffectedFixed
IBM Daeja ViewONE 5 —

References