7.1
High
CVE-2019-4419 IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack…
Description
IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Intelligent Operations Center | 5.2.0 | No fix stated |
| Intelligent Operations Center 5.1 | 5.1.0 → 5.1.0.14 | No fix stated |
Other CVEs of Intelligent Operations Center
The 10 CVEs of Intelligent Operations Center →
CVE-2020-4318
IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water…
5.4
Medium
CVE-2020-4317
IBM Intelligent Operations Center for Emergency Management, Intelligent Operations Center (IOC), and IBM Water…
5.4
Medium
CVE-2019-4321
IBM Intelligent Operations Center V5.1.0 - V5.2.0, IBM Intelligent Operations Center for Emergency Management V5.1.0 -…
5.9
Medium
CVE-2019-4420
IBM Intelligent Operations Center V5.1.0 through V5.2.0 could disclose detailed error messages, revealing sensitive…
6.2
Medium