CVE-2019-4208

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

High · published May 7, 2019

CVSS v3.0
7.1
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 159129.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/C:H/AV:N/I:N/AC:L/A:L/UI:N/S:U/PR:L/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01853 · 79.0th percentile
Published
2019-05-07T18:35Z
EPSS history
Timeline
  • 07 MAY 18:35Z
    IBM TRIRIGA Application Platform 3.5.3 and 3.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
    cvelistv5