CVE-2022-22486: IBM Tivoli Workload Scheduler XML external entity injection
IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 226328.
Other sources
IBM Tivoli Workload Scheduler is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22486?
CVE-2022-22486 has a moderate severity level due to the potential exposure of sensitive information.
How do I fix CVE-2022-22486?
To fix CVE-2022-22486, update IBM Tivoli Workload Scheduler to the latest version that addresses this vulnerability.
What systems are affected by CVE-2022-22486?
CVE-2022-22486 affects IBM Tivoli Workload Scheduler versions 9.4, 9.5, and 10.1.
What type of attack does CVE-2022-22486 involve?
CVE-2022-22486 involves an XML External Entity Injection (XXE) attack.
What could a remote attacker achieve through CVE-2022-22486?
A remote attacker could exploit CVE-2022-22486 to expose sensitive information or consume memory resources.