CVE-2019-4043: XEE
IBM Sterling B2B Integrator Standard Edition 5.2.0 snf 6.0.0.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 156239.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-4043?
CVE-2019-4043 is classified as having a medium severity due to its potential to expose sensitive information and consume memory resources.
How do I fix CVE-2019-4043?
To fix CVE-2019-4043, you should upgrade IBM Sterling B2B Integrator to the latest version that addresses this vulnerability.
What kind of attack does CVE-2019-4043 allow?
CVE-2019-4043 allows for XML External Entity Injection (XXE) attacks when processing XML data.
Which versions of IBM Sterling B2B Integrator are affected by CVE-2019-4043?
CVE-2019-4043 affects IBM Sterling B2B Integrator versions from 5.2.0 to 5.2.6.4 and version 6.0.0.0.
What could a successful exploit of CVE-2019-4043 lead to?
A successful exploit of CVE-2019-4043 could lead to exposure of sensitive information or depletion of memory resources.