CVE-2017-1254

Description

IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.

Risk Information

Base Score

7.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

EPSS Score

Exploitation Probability

0.465

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in IBM Security Guardium 10.0	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.1	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.1.2	Windows
Multiple Vulnerabilities are affected in IBM Security Guardium 10.0.1	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234