Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

IBM Business Automation Workflow 18.0.0.0, 18.0.0.1, 18.0.0.2, 19.0.0.1, and 19.0.0.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162770.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
7.1HIGH3.0CVSS:3.0/S:U/AV:N/C:H/AC:L/PR:L/UI:N/I:N/A:L/RC:C/RL:O/E:U

Product Status

Learn more

Versions 5 Total

Default Status: unknown

affected

  • affected at 18.0.0.0 
  • affected at 18.0.0.1 
  • affected at 18.0.0.2 
  • affected at 19.0.0.1 
  • affected at 19.0.0.2 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.