CVE-2017-1219

MEDIUM

IBM Bigfix Platform - XXE

Title source: rule

Description

IBM Tivoli Endpoint Manager is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 123859.

References (2)

[Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg22006014

[VDB Entry, Vendor Advisory] https://exchange.xforce.ibmcloud.com/vulnerabilities/123859

Scores

CVSS v3 6.5

EPSS 0.0054

EPSS Percentile 67.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Details

CWE

CWE-611

Status published

Products (17)

ibm/bigfix_platform

... and 7 more

Published Jul 19, 2017

Tracked Since Feb 18, 2026