CVE-2019-4513

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data

High · published August 26, 2019

CVSS v3.0
8.2
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AC:L/A:L/PR:N/I:N/S:U/UI:N/C:H/AV:N/RL:O/RC:C/E:U
CVSS v4.0
Not supplied
EPSS
0.02764 · 86.2th percentile
Published
2019-08-26T14:40Z
EPSS history
Timeline
  • 26 AUG 14:40Z
    IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data
    cvelistv5