CVE-2024-54171

IBM EntireX XML external entity injection PUBLISHED

Description (CNA)

IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Affected (CNA)

Vendor / product	Versions
IBM / EntireX	affected 11.1

CWE

CWE-611

References

https://www.ibm.com/support/pages/node/7182693

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.