CVE-2017-1219

Опубликовано: 19 июл. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 5.5

EPSS Низкий

Описание

IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg22006014
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123859
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg22006014
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/123859
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:bigfix_platform:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.1.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.1.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.1.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.1.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:bigfix_platform:9.2.7:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00537

Низкий

6.5 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

GHSA-mhpc-25wr-qcwq