Critical severity9.1NVD Advisory· Published Aug 2, 2017· Updated May 13, 2026

CVE-2017-1383

Description

IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 127155.

Affected products

IBM/Infosphere Information Server3 versions
cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_information_server:9.1:*:*:*:*:*:*:*
IBM/InfoSphere Information Serverv5
Range: 9.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ibm.com/support/docview.wssnvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/127155nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000