7.1
High
CVE-2019-4433 IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an…
Description
IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| InfoSphere Identity Insight | 9.0 | No fix stated |
| InfoSphere Identity Insight | 8.1 | No fix stated |
| InfoSphere Global Name Management | 6.0 | No fix stated |
| InfoSphere Global Name Management | 5.0 | No fix stated |