8.2
CVSSv3

CVE-2017-1322

Published: 27/06/2017 Updated: 05/07/2017
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
CVSS v3 Base Score: 8.2 | Impact Score: 4.2 | Exploitability Score: 3.9
VMScore: 570
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:P

Vulnerability Summary

IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm api connect 5.0.6.2

ibm api connect 5.0.1.0

ibm api connect 5.0.0.0

ibm api connect 5.0.6.0

ibm api connect 5.0.5.0

ibm api connect 5.0.4.0

ibm api connect 5.0.3.0

ibm api connect 5.0.2.0

ibm api connect 5.0.7.0

ibm api connect 5.0.6.1

ibm api connect 5.0.0.1