CVE-2018-1801medium

CVE-2018-1801: medium-severity vulnerability in IBM App Connect

Published · Updated

Follow this CVE+ Monitor Integration Bus+ Monitor WebSphere Message Broker

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 2.5%
IBM App Connect V11.0.0.0 through V11.0.0.1, IBM Integration Bus V10.0.0.0 through V10.0.0.13, IBM Integration Bus V9.0.0.0 through V9.0.0.10, and WebSphere Message Broker V8.0.0.0 through V8.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to consume memory resources. IBM X-Force ID: 149639.
CVSS:3.0/A:L/AC:L/AV:N/C:N/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · App ConnectIBM · Integration BusIBM · WebSphere Message Broker
Related CVEs — IBM App Connect

In the same product, most dangerous first.

CVE-2017-1126—CVE-2017-1126EPSS 1.2%CVE-2017-1693—CVE-2017-1693EPSS 0.9%CVE-2017-1694—CVE-2017-1694EPSS 0.8%CVE-2024-22356MEDIUMIBM App Connect Enterprise and IBM Integration Bus for z/OS information disclosureEPSS 0.5%CVE-2017-1418MEDIUMCVE-2017-1418EPSS 0.3%CVE-2017-1207—CVE-2017-1207EPSS 0.3%