Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

IBM Security Verify Privilege Manager 10.8 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A local attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 184883.

CVSS 1 Total

Learn more
ScoreSeverityVersionVector String
5.7MEDIUM3.0CVSS:3.0/PR:N/C:L/AC:L/S:C/I:N/AV:L/UI:N/A:L/RC:C/E:U/RL:O

Product Status

Learn more

Versions 1 Total

Default Status: unknown

affected

  • affected at 10.8 

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.