Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2019-4433

Опубликовано: 20 авг. 2019
Источник: nvd
CVSS3: 7.1
CVSS3: 8.2
CVSS2: 6.4
EPSS Низкий

Описание

IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:infosphere_global_name_management:5.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_global_name_management:6.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_identity_insight:8.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:infosphere_identity_insight:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00569
Низкий

7.1 High

CVSS3

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

github логотип

GHSA-h455-6c5f-p957

CVSS3: 8.2
github
больше 3 лет назад

IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890.

EPSS

Процентиль: 68%
0.00569
Низкий

7.1 High

CVSS3

8.2 High

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-611