CVE-2017-1149: XEE
IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 122202.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1149?
CVE-2017-1149 has a severity rating of High due to its potential to cause denial of service and expose sensitive information.
How do I fix CVE-2017-1149?
To fix CVE-2017-1149, it is recommended to upgrade to a version of IBM UrbanCode Deploy that includes the security patch for this vulnerability.
What versions of IBM UrbanCode Deploy are affected by CVE-2017-1149?
CVE-2017-1149 affects IBM UrbanCode Deploy versions 6.0, 6.1, and 6.2.
Can CVE-2017-1149 be exploited remotely?
Yes, CVE-2017-1149 can be exploited remotely by an attacker to conduct denial of service attacks.
What type of vulnerability is CVE-2017-1149?
CVE-2017-1149 is classified as an XML External Entity Injection (XXE) vulnerability.