CVE-2018-1821: XEE
IBM Operational Decision Management 8.5, 8.6, 8.7, 8.8, and 8.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150170.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1821?
CVE-2018-1821 is considered a critical vulnerability due to its potential to expose sensitive information and consume system resources.
How do I fix CVE-2018-1821?
To fix CVE-2018-1821, upgrade to IBM Operational Decision Management versions 8.6.0.4, 8.7.1.3, 8.8.1.4, or 8.9.2.2 or later.
What types of attacks can CVE-2018-1821 facilitate?
CVE-2018-1821 can facilitate XML External Entity Injection (XXE) attacks, which may lead to sensitive data exposure.
Which IBM Operational Decision Manager versions are affected by CVE-2018-1821?
CVE-2018-1821 affects IBM Operational Decision Manager versions 8.5, 8.6, 8.7, 8.8, and 8.9 up to specific patch levels.
Who can exploit CVE-2018-1821?
A remote attacker can exploit CVE-2018-1821 to conduct XXE attacks if they have access to XML data processing by the affected software.