Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM EntireX XML external entity injection
Vulnerability Description
IBM EntireX 11.1 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. An authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L
Vulnerability Type
XML外部实体引用的不恰当限制(XXE)
Vulnerability Title
IBM EntireX 代码问题漏洞
Vulnerability Description
IBM EntireX是美国国际商业机器（IBM）公司的一种多功能中间件解决方案，旨在促进企业核心应用程序与现代应用程序之间的无缝集成。 IBM EntireX存在代码问题漏洞，该漏洞源于在处理XML数据时容易受到XML外部实体注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A