VYPR
High severity7.1NVD Advisory· Published Feb 21, 2018· Updated Jun 17, 2026

CVE-2017-1758

CVE-2017-1758

Description

IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • cpe:2.3:a:ibm:control_center:6.0.0.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:ibm:control_center:6.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:control_center:6.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:control_center:6.1.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:control_center:6.1.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:control_center:6.1.1.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.0
  • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*+ 7 more
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.0:*:*:*:*:cps_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.2.1:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.3.0:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.0.4.0:*:*:*:*:ach_services:*:*
    • cpe:2.3:a:ibm:financial_transaction_manager:3.1.0.0:*:*:*:*:ach_services:*:*
    • (no CPE)range: 3.0.2, 3.0.3, 3.0.4, 3.1.0
    • (no CPE)range: 3.0.2
  • cpe:2.3:a:ibm:transformation_extender_advanced:9.0:*:*:*:*:*:*:*
  • 9.0+ 1 more
    • (no CPE)range: 9.0
    • (no CPE)range: 9.0

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.