CVE-2017-1383: XEE
IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1383?
CVE-2017-1383 is classified as a high severity vulnerability due to the potential for remote exploitation.
How do I fix CVE-2017-1383?
To mitigate CVE-2017-1383, it is recommended to upgrade to a patched version of IBM InfoSphere Information Server that addresses the XML External Entity Injection vulnerability.
Who is affected by CVE-2017-1383?
CVE-2017-1383 affects IBM InfoSphere Information Server versions 9.1, 11.3, and 11.5.
What type of attack does CVE-2017-1383 involve?
CVE-2017-1383 involves an XML External Entity Injection (XXE) attack that can lead to information disclosure or resource consumption.
Can CVE-2017-1383 lead to data exposure?
Yes, CVE-2017-1383 can allow an attacker to expose sensitive information when exploiting the vulnerability.