CVE-2017-1527

CVE-2017-1527: vulnerability in IBM Business Process Manager Advanced

Published · Updated

Follow this CVE+ Monitor Business Process Manager Advanced

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.0%
IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 130156.
Affected products
IBM · Business Process Manager Advanced
Related CVEs — IBM Business Process Manager Advanced

In the same product, most dangerous first.

CVE-2017-1539—CVE-2017-1539EPSS 1.5%CVE-2020-4490MEDIUMCVE-2020-4490EPSS 0.9%CVE-2017-1494—CVE-2017-1494EPSS 0.8%CVE-2017-1425—CVE-2017-1425EPSS 0.7%CVE-2017-1530—CVE-2017-1530EPSS 0.7%CVE-2017-1531—CVE-2017-1531EPSS 0.7%