2 lines
4.3 KiB
JSON
2 lines
4.3 KiB
JSON
{"affected":[{"affectedData":[{"product":"Runtimes for Java Technology","vendor":"IBM Corporation","versions":[{"status":"affected","version":"6.0, 6.1, 7.0, 7.1, 8.0"}]}],"source":"psirt@us.ibm.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:ibm:sdk:*:service_refresh_16_fp41:*:*:java_technology_edition:*:*:*","matchCriteriaId":"CD06C8C9-F372-447B-BACF-FFF285FA752B","versionEndIncluding":"6","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sdk:*:service_refresh_8_fp41:*:*:java_technology_edition:*:*:*","matchCriteriaId":"433DD25E-7F4E-4A13-B1C2-6D42E9C6F543","versionEndIncluding":"6r1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sdk:*:service_refresh_10_fp1:*:*:java_technology_edition:*:*:*","matchCriteriaId":"A5A902B3-8747-4185-BA40-F2F6E93340B0","versionEndIncluding":"7","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp1:*:*:java_technology_edition:*:*:*","matchCriteriaId":"7E1CBA89-77F9-4E73-B22C-D9B7566B0335","versionEndIncluding":"7r1","vulnerable":true},{"criteria":"cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp2:*:*:java_technology_edition:*:*:*","matchCriteriaId":"DA657C59-DF17-496C-B7CB-16F8A594430A","versionEndIncluding":"8","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150."},{"lang":"es","value":"SDK de IBM, Java Technology Edition es vulnerable a un error de inyección XML External Entity (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información altamente confidencial o consumir recursos de memoria. ID de IBM X-Force: 125150."}],"id":"CVE-2017-1289","lastModified":"2026-06-17T01:14:11.783","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":6.4,"confidentialityImpact":"PARTIAL","integrityImpact":"NONE","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":4.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":8.2,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","version":"3.0"},"exploitabilityScore":3.9,"impactScore":4.2,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-05-22T20:29:00.313","references":[{"source":"psirt@us.ibm.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/98401"},{"source":"psirt@us.ibm.com","url":"https://access.redhat.com/errata/RHSA-2017:1220"},{"source":"psirt@us.ibm.com","url":"https://access.redhat.com/errata/RHSA-2017:1221"},{"source":"psirt@us.ibm.com","url":"https://access.redhat.com/errata/RHSA-2017:1222"},{"source":"psirt@us.ibm.com","url":"https://access.redhat.com/errata/RHSA-2017:3453"},{"source":"psirt@us.ibm.com","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/docview.wss?uid=swg22002169"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/98401"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2017:1220"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2017:1221"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2017:1222"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://access.redhat.com/errata/RHSA-2017:3453"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://www.ibm.com/support/docview.wss?uid=swg22002169"}],"sourceIdentifier":"psirt@us.ibm.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-611"}],"source":"nvd@nist.gov","type":"Primary"}]}
|