ibm security-access-manager CVE-2018-1970 vulnerability in IBM Products
Published on February 4, 2019

IBM Security Identity Manager 7.0.1 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 153751.

NVD


Products Associated with CVE-2018-1970

stack.watch emails you whenever new vulnerabilities are published in IBM Security Access Manager or IBM Security Identity Manager. Just hit a watch button to start following.

IBM Security Access Manager
 
IBM Security Identity Manager
 

Affected Versions

IBM Security Identity Manager Version 7.0.1 is affected by CVE-2018-1970

Exploit Probability

EPSS
0.36%
Percentile
57.98%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.