CVE-2017-1322: XEE
Published Jun 27, 2017
·Updated
IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125918.
Affected Software
11 affected components
IBM API Connect=5.0.0.0
IBM API Connect=5.0.0.1
IBM API Connect=5.0.1.0
IBM API Connect=5.0.2.0
IBM API Connect=5.0.3.0
IBM API Connect=5.0.4.0
IBM API Connect=5.0.5.0
IBM API Connect=5.0.6.0
IBM API Connect=5.0.6.1
IBM API Connect=5.0.6.2
IBM API Connect=5.0.7.0
Remediation
Patch Available
Event History
Jun 27, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-1322?
CVE-2017-1322 is considered a high severity vulnerability due to its potential for data exposure and resource depletion.
2
How do I fix CVE-2017-1322?
To mitigate CVE-2017-1322, upgrade IBM API Connect to version 5.0.6.1 or later.
3
What kind of attack does CVE-2017-1322 expose systems to?
CVE-2017-1322 is vulnerable to XML External Entity Injection (XXE) attacks.
4
What versions of IBM API Connect are affected by CVE-2017-1322?
CVE-2017-1322 affects IBM API Connect versions from 5.0.0.0 to 5.0.6.0.
5
What can an attacker achieve by exploiting CVE-2017-1322?
An attacker exploiting CVE-2017-1322 can potentially expose sensitive information or consume server memory resources.