XML External Entity Injection Vulnerability in IBM Intelligent Operations Center
CVE-2019-4419
7.1HIGH
Summary
The IBM Intelligent Operations Center from version 5.1.0 to 5.2.0 is susceptible to an XML External Entity Injection (XXE) vulnerability. This vulnerability allows remote attackers to exploit XML data processing weaknesses, potentially leading to the unauthorized exposure of sensitive information or excessive consumption of memory resources. Security precautions should be taken to mitigate such risks.
Affected Version(s)
Intelligent Operations Center 5.1.0
Intelligent Operations Center 5.1.0.1
Intelligent Operations Center 5.1.0.2
References
CVSS V3.1
Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved