Skip to content
Sign in
7.1 High

CVE-2022-38389 IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when…

Description

IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 233975.

Affected products and versions

Product Affected versions Fixed in
Tivoli Workload Scheduler Versions not published

Other CVEs of Tivoli Workload Scheduler

The 3 CVEs of Tivoli Workload Scheduler →
CVE-2022-22486 IBM Tivoli Workload Scheduler 9.4, 9.5, and 10.1 is vulnerable to an XML External Entity Injection (XXE) attack when… 10.0 Critical CVE-2017-1716 IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to… Not rated
Track this CVE