CyberSec.Space Logo
Back to CVE Browser

CVE-2017-1383

CRITICAL
9.1
CVSS Severity Score
EPSS Score0.0440%
EPSS Percentile43.34th
PublishedAug 2, 2017
Last ModifiedMay 13, 2026

Vulnerability Description

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.

Affected Platforms (CPE)

📦
Ibm

Infosphere Information Server

= 9.1
📦
Ibm

Infosphere Information Server

= 11.3
📦
Ibm

Infosphere Information Server

= 11.5

References & Advisories

🔗 http://www.ibm.com/support/docview.wss?uid=swg22005803
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/127155
🔗 http://www.ibm.com/support/docview.wss?uid=swg22005803
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/127155

Related Vulnerabilities

CVE-2009-424010.0

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 be...

CVE-2020-275839.8

IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticate...

CVE-2012-02049.3

Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBroke...

CVE-2021-389489.1

IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A ...