CVE-2024-54171

EPSS 0.18%
Veröffentlicht 06.02.2025 21:15:21
Zuletzt bearbeitet 07.07.2025 17:50:09
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Entirex Version11.1

Linux ≫ Linux Kernel Version-
Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.18%	0.396

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	7.1	2.8	4.2	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

https://www.ibm.com/support/pages/node/7182693

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-54171

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-54171

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-54171

EUVD