Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Security Access Manager 安全漏洞
Vulnerability Description
IBM Security Access Manager是美国IBM公司的一款应用于信息安全管理的产品。该产品通过面向Web、移动和云计算的集成设备来实现访问管理控制。 IBM Security Access Manager中存在XML外部注入漏洞。远程攻击者可利用该漏洞获取敏感信息或消耗所有的可用内存资源。以下版本受到影响：IBM Security Access Manager for Web 8.0.0.0版本至8.0.1.4版本，Security Access Manager for Mobile 8
CVSS Information
N/A
Vulnerability Type
N/A