CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2018-1727

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.9%

CVSS Severity

CVSS v3 Score 7.1

CVSS v2 Score 6.4

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/147630
https://www.ibm.com/support/docview.wss?uid=ibm10718887
https://exchange.xforce.ibmcloud.com/vulnerabilities/147630
https://www.ibm.com/support/docview.wss?uid=ibm10718887

Products affected by CVE-2018-1727

Ibm » Infosphere Information Server » Version: 11.3

cpe:2.3:a:ibm:infosphere_information_server:11.3
Ibm » Infosphere Information Server » Version: 11.5

cpe:2.3:a:ibm:infosphere_information_server:11.5
Ibm » Infosphere Information Server » Version: 11.7

cpe:2.3:a:ibm:infosphere_information_server:11.7
Ibm » Infosphere Information Server » Version: 9.1

cpe:2.3:a:ibm:infosphere_information_server:9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-1727

Products

Pricing

Contact Us