CVE-2017-1289

2017-05-2220:00:00

ibm

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.1%

JSON

IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.

CNA Affected

[
  {
    "product": "Runtimes for Java Technology",
    "vendor": "IBM Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "6.0, 6.1, 7.0, 7.1, 8.0"
      }
    ]
  }
]