Skip to content
OpenAdvisories
High · 7.1 CVE-2018-1920 EUVD-2018-12499GHSA-q2v2-62r4-p3m4

IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remo…

Published Dec 7, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Marketing Platform 9.1.0, 9.1.2 and 10.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 152855.

Affected products

VendorProductAffectedFixed
IBM Marketing Platform 9.1.2, 9.1.0, 10.1 —

References