CVE-2019-4513

No fix known EPSS 3%CVSS 8.2

IBM Security Access Manager for Enterprise Single Sign-On 8.2.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 164555.

Published 2019-08-26 · CVE record · OSV

Products: ibm security_access_manager_for_enterprise_single_sign-on