CVE-2021-38948: Critical severity IBM InfoSphere Information Server vulnerability
IBM InfoSphere Information Server 11.7 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 211402.
Other sources
IBM InfoSphere Information Server is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this security issue in IBM InfoSphere Information Server?
The vulnerability ID for this security issue in IBM InfoSphere Information Server is CVE-2021-38948.
What is the severity rating of CVE-2021-38948 vulnerability?
The severity rating of the CVE-2021-38948 vulnerability is 9.1 (critical).
How does the XML External Entity Injection (XXE) attack in CVE-2021-38948 work?
In CVE-2021-38948, the XML External Entity Injection (XXE) attack occurs when processing XML data, allowing remote attackers to expose sensitive information or consume memory resources.
Which version of IBM InfoSphere Information Server is affected by CVE-2021-38948?
The version 11.7 of IBM InfoSphere Information Server is affected by CVE-2021-38948.
Is there a patch or remedy available for CVE-2021-38948?
Yes, there is a patch available for CVE-2021-38948. You can find it at the following URL: [https://www.ibm.com/support/pages/node/878310](https://www.ibm.com/support/pages/node/878310)