High severity8.2NVD Advisory· Published Aug 20, 2019· Updated Jun 17, 2026
CVE-2019-4433
CVE-2019-4433
Description
IBM InfoSphere Global Name Management 5.0 and 6.0 and IBM InfoSphere Identity Insight 8.1 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162890.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:ibm:infosphere_global_name_management:5.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:infosphere_global_name_management:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_global_name_management:6.0:*:*:*:*:*:*:*
- (no CPE)range: 5.0 and 6.0
- (no CPE)range: 5.0
cpe:2.3:a:ibm:infosphere_identity_insight:8.1:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:ibm:infosphere_identity_insight:8.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:infosphere_identity_insight:9.0:*:*:*:*:*:*:*
- (no CPE)range: 8.1 and 9.0
- (no CPE)range: 8.1
Patches
Vulnerability mechanics
References
3- www.ibm.com/support/docview.wssnvdMitigationVendor Advisory
- www.ibm.com/support/docview.wssnvdMitigationVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/162890nvdBroken LinkVDB Entry
News mentions
0No linked articles in our index yet.