ibm security-access-manager CVE-2017-1477 is a vulnerability in IBM Security Access Manager
Published on November 13, 2017

IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 128612.

NVD


Products Associated with CVE-2017-1477

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2017-1477 are published in IBM Security Access Manager:

IBM Security Access Manager
 

Affected Versions

IBM Security Access Manager Version 9.0.3 is affected by CVE-2017-1477

Exploit Probability

EPSS
0.58%
Percentile
68.54%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.