Back to CVE Browser

CVE-2021-38948

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0210%

EPSS Percentile9.54th

PublishedNov 2, 2021

Last ModifiedNov 21, 2024

Vulnerability Description

IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.

Affected Platforms (CPE)

📦

Ibm

Infosphere Information Server

= 11.7

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/211402

🔗 https://www.ibm.com/support/pages/node/6509632

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/211402

🔗 https://www.ibm.com/support/pages/node/6509632

Related Vulnerabilities

CVE-2009-424010.0

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 be...

CVE-2020-275839.8

IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticate...

CVE-2012-02049.3

Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBroke...

CVE-2017-13839.1

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processin...