CVE-2017-1477

2017-11-1323:00:00

ibm

www.cve.org

AI Score

7.8

Confidence

High

EPSS

0.001

Percentile

48.6%

JSON

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612.

CNA Affected

[
  {
    "product": "Security Access Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.3"
      }
    ]
  }
]