CVE-2017-1477

CVE-2017-1477: vulnerability in IBM Security Access Manager

Published · Updated

Follow this CVE+ Monitor Security Access Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.4%
IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612.
Affected products
IBM · Security Access Manager
Related CVEs — IBM Security Access Manager

In the same product, most dangerous first.

CVE-2017-1453—CVE-2017-1453EPSS 2.9%CVE-2017-1476MEDIUMCVE-2017-1476EPSS 2.2%CVE-2017-1480MEDIUMCVE-2017-1480EPSS 1.7%CVE-2017-1474MEDIUMCVE-2017-1474EPSS 1.7%CVE-2019-4135HIGHCVE-2019-4135EPSS 1.5%CVE-2019-4036HIGHCVE-2019-4036EPSS 1.4%