CVE-2018-1727

HIGH

IBM InfoSphere Information Server 9.1, 11.3, 11.5, 11.7 - XML External Entity Injection

Title source: llm

Description

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/docview.wss?uid=ibm10718887

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/147630

Scores

CVSS v3 7.1

EPSS 0.0246

EPSS Percentile 82.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Details

CWE

CWE-611

Status published

Products (4)

ibm/infosphere_information_server 9.1

ibm/infosphere_information_server 11.3

ibm/infosphere_information_server 11.5

ibm/infosphere_information_server 11.7

Published Feb 15, 2019

Tracked Since Feb 18, 2026