CVE-2017-1254: XEE
IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1254?
CVE-2017-1254 is considered a critical vulnerability due to its potential for exposing sensitive information.
How do I fix CVE-2017-1254?
To fix CVE-2017-1254, upgrade IBM Security Guardium to a version that is not affected by the XML External Entity Injection vulnerability.
Who is affected by CVE-2017-1254?
IBM Security Guardium versions 10.0, 10.0.1, 10.1, and 10.1.2 are affected by CVE-2017-1254.
What type of attack is CVE-2017-1254 associated with?
CVE-2017-1254 is associated with an XML External Entity Injection (XXE) attack.
What can an attacker achieve by exploiting CVE-2017-1254?
An attacker exploiting CVE-2017-1254 could potentially expose sensitive information or consume memory resources on the affected system.