CVE-2024-49781 — IBM OpenPages XML external entity injection

CVE-2024-49781

IBM OpenPages XML external entity injection PUBLISHED

Description (CNA)

IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected (CNA)

Vendor / product	Versions
IBM / OpenPages with Watson	affected 8.3; affected 9.0

CWE

CWE-611

References

https://www.ibm.com/support/pages/node/7183541

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.