Skip to content
OpenAdvisories
High · 7.1 CVE-2020-4246 EUVD-2020-25493GHSA-xp85-5pp4-g3q5

IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML …

Published May 28, 2020 · Updated Sep 17, 2024 · Assigned by ibm

Description

IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481.

Affected products

VendorProductAffectedFixed
IBM Security Identity Governance and Intelligence 5.2.6 —

References