CVE-2017-1383

Critical

Published: 02/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Risk Assessment

This vulnerability could lead to the exposure of confidential data and negatively impact system performance, potentially compromising data integrity within the organization.

Recommendation

It is recommended to update to the latest version of IBM InfoSphere Information Server and implement appropriate security measures to protect against XXE attacks.

Original NVD description (English source)

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.