High severity8.2NVD Advisory· Published May 22, 2017· Updated May 13, 2026
CVE-2017-1289
CVE-2017-1289
Description
IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 125150.
Affected products
6cpe:2.3:a:ibm:sdk:*:service_refresh_10_fp1:*:*:java_technology_edition:*:*:*+ 4 more
- cpe:2.3:a:ibm:sdk:*:service_refresh_10_fp1:*:*:java_technology_edition:*:*:*range: <=7
- cpe:2.3:a:ibm:sdk:*:service_refresh_16_fp41:*:*:java_technology_edition:*:*:*range: <=6
- cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp1:*:*:java_technology_edition:*:*:*range: <=7r1
- cpe:2.3:a:ibm:sdk:*:service_refresh_4_fp2:*:*:java_technology_edition:*:*:*range: <=8
- cpe:2.3:a:ibm:sdk:*:service_refresh_8_fp41:*:*:java_technology_edition:*:*:*range: <=6r1
- IBM Corporation/Runtimes for Java Technologyv5Range: 6.0, 6.1, 7.0, 7.1, 8.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- www.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/98401nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHSA-2017:1220nvd
- access.redhat.com/errata/RHSA-2017:1221nvd
- access.redhat.com/errata/RHSA-2017:1222nvd
- access.redhat.com/errata/RHSA-2017:3453nvd
News mentions
0No linked articles in our index yet.