ibm security-access-manager CVE-2018-1970 vulnerability in IBM Products
Published on February 4, 2019

IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751.

NVD


Products Associated with CVE-2018-1970

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-1970 are published in these products:

IBM Security Access Manager
 
IBM Security Identity Manager
 

Affected Versions

IBM Security Identity Manager Version 7.0.1 is affected by CVE-2018-1970

Exploit Probability

EPSS
0.36%
Percentile
57.69%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.