CVE-2017-1758
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
IBM Financial Transaction Manager para ACH Services Multi-Platform (IBM Control Center 6.0 y 6.1; IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4 y 3.1.0; IBM Transformation Extender Advanced 9.0) es vulnerable a un ataque de XEE (XML External Entity) al procesar datos XML. Un atacante remoto podrÃa explotar esta vulnerabilidad para exponer información sensible o consumir recursos de la memoria. IBM X-Force ID: 135859.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2016-11-30 CVE Reserved
- 2018-02-21 CVE Published
- 2023-03-07 EPSS Updated
- 2024-09-16 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-611: Improper Restriction of XML External Entity Reference
CAPEC
References (5)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/103130 | Third Party Advisory |
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
http://www.ibm.com/support/docview.wss?uid=swg22012828 | 2018-03-12 | |
http://www.ibm.com/support/docview.wss?uid=swg22013375 | 2018-03-12 |
URL | Date | SRC |
---|---|---|
http://www.ibm.com/support/docview.wss?uid=swg22013432 | 2018-03-12 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/135859 | 2018-03-12 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.0.2.0 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.0.2.0" | ach_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.0.2.0 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.0.2.0" | cps_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.0.2.1 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.0.2.1" | ach_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.0.3.0 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.0.3.0" | ach_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.0.4.0 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.0.4.0" | ach_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Financial Transaction Manager Search vendor "Ibm" for product "Financial Transaction Manager" | 3.1.0.0 Search vendor "Ibm" for product "Financial Transaction Manager" and version "3.1.0.0" | ach_services |
Affected
| ||||||
Ibm Search vendor "Ibm" | Transformation Extender Advanced Search vendor "Ibm" for product "Transformation Extender Advanced" | 9.0 Search vendor "Ibm" for product "Transformation Extender Advanced" and version "9.0" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Control Center Search vendor "Ibm" for product "Control Center" | 6.0.0.0 Search vendor "Ibm" for product "Control Center" and version "6.0.0.0" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Control Center Search vendor "Ibm" for product "Control Center" | 6.0.0.1 Search vendor "Ibm" for product "Control Center" and version "6.0.0.1" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Control Center Search vendor "Ibm" for product "Control Center" | 6.1.0.0 Search vendor "Ibm" for product "Control Center" and version "6.1.0.0" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Control Center Search vendor "Ibm" for product "Control Center" | 6.1.0.1 Search vendor "Ibm" for product "Control Center" and version "6.1.0.1" | - |
Affected
| ||||||
Ibm Search vendor "Ibm" | Control Center Search vendor "Ibm" for product "Control Center" | 6.1.1.0 Search vendor "Ibm" for product "Control Center" and version "6.1.1.0" | - |
Affected
|