CVE-2017-1758

IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4…

published February 21, 2018

CVSS
—
EPSS
2%
Percentile
75.5
In the wild
Unconfirmed
What it is

IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01604 · 75.5th percentile
Published
2018-02-21T21:00Z
EPSS history
Timeline
  • 21 FEB 21:00Z
    IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4…
    cvelistv5