Skip to content
Sign in
7.1 High

CVE-2019-4062 IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack…

Description

IBM i2 Intelligent Analyis Platform 9.0.0 through 9.1.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 157007.

Affected products and versions

Product Affected versions Fixed in
i2 Analyst's Notebook 9.1 9.1.0 → 9.1.1 No fix stated
i2 Analyst's Notebook 9.0 9.0.0 → 9.0.7 No fix stated

Other CVEs of i2 Analyst's Notebook

The 3 CVEs of i2 Analyst's Notebook →
CVE-2021-39050 IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper… 5.3 Medium CVE-2021-39049 IBM i2 Analyst's Notebook 9.2.0, 9.2.1, and 9.2.2 is vulnerable to a stack-based buffer overflow, caused by improper… 5.3 Medium
Track this CVE