| Package | Affected versions | Patched versions |
|---|---|---|
| infosphere global name management | = 5.0= 6.0 | |
| infosphere identity insight | = 8.1= 9.0 |
IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free