Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability - CVE-2019-4707 - Vulnerability Database
IBM WebSEAL

IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability - CVE-2019-4707

High
Reference: CVE-2019-4707
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2019-4707
Title: IBM WebSEAL Improper Restriction of XML External Entity Reference Vulnerability
Overview:

IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 172018.