CVE-2019-4539

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or…

High · published October 2, 2019

CVSS v3.0
7.1
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or commands of the XML before it is processed by an end system. IBM X-Force ID: 165812.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/PR:L/A:H/I:L/AV:N/S:U/C:N/AC:L/UI:N/E:U/RC:C/RL:O
CVSS v4.0
Not supplied
EPSS
0.01230 · 68.7th percentile
Published
2019-10-02T14:45Z
EPSS history
Timeline
  • 02 OCT 14:45Z
    IBM Security Directory Server 6.4.0 does not properly neutralize special elements that are used in XML, allowing attackers to modify the syntax, content, or…
    cvelistv5