CVE-2017-18640

Description

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

2.166

Vulnerability	OS Platform
Vulnerabilities CVE-2017-18640 are fixed in Snake Yaml 1.26	Windows
Multiple Vulnerabilities are affected in IBM Aspera Shares 1.10.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.1	Windows
Multiple Vulnerabilities are affected in IBM Cognos Analytics 11.2	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.0.3.8	Windows
Multiple Vulnerabilities are affected in IBM Business Automation Workflow 19.0	Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.11.0.1	Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.11.1	Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.10.4	Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.10.5.2	Windows
Multiple Vulnerabilities are affected in IBM Operational Decision Manager 8.12.0.1	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.0.8	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.1.4	Windows
Multiple Vulnerabilities are affected in IBM Sterling B2B Integrator 6.1.2.2	Windows
(RHSA-2020:4807) prometheus-jmx-exporter security update prometheus-jmx-exporter-0.12.0-6.el8.noarch.rpm	Linux
Vulnerabilities CVE-2017-18640 are fixed in Snake Yaml for Linux 1.26	Linux

No records found