返回 CVE 浏览器

CVE-2017-1383

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0440%

EPSS Percentile43.34th

Published2017年8月2日

Last Modified2026年5月13日

Vulnerability Description

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.

Affected Platforms (CPE)

📦

Ibm

Infosphere Information Server

= 9.1

📦

Ibm

Infosphere Information Server

= 11.3

📦

Ibm

Infosphere Information Server

= 11.5

References & Advisories

🔗 http://www.ibm.com/support/docview.wss?uid=swg22005803

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/127155

🔗 http://www.ibm.com/support/docview.wss?uid=swg22005803

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/127155

相关漏洞威胁

CVE-2009-424010.0

Multiple buffer overflows in unspecified setuid executables in the DataStage subsystem in IBM InfoSphere Information Server 8.1 be...

CVE-2020-275839.8

IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote unauthenticate...

CVE-2012-02049.3

Untrusted search path vulnerability in InfoSphere Import Export Manager 8.1 through 9.1 in InfoSphere Information Server MetaBroke...

CVE-2021-389489.1

IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A ...