Vulnerability Description
IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 162737.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Intelligent Operations Center | >= 5.1.0, <= 5.2.0 |
| Ibm | Intelligent Operations Center For Emergency Management | >= 5.1.0, <= 5.1.0.6 |
| Ibm | Water Operations For Waternamics | >= 5.1.0, <= 5.2.1.1 |
Related Weaknesses (CWE)
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/162737VDB Entry
- https://www.ibm.com/support/docview.wss?uid=ibm10956433Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/162737VDB Entry
- https://www.ibm.com/support/docview.wss?uid=ibm10956433Vendor Advisory
FAQ
What is CVE-2019-4419?
CVE-2019-4419 is a vulnerability with a CVSS score of 8.2 (HIGH). IBM Intelligent Operations Center V5.1.0 through V5.2.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to e...
How severe is CVE-2019-4419?
CVE-2019-4419 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-4419?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Intelligent Operations Center, Ibm Intelligent Operations Center For Emergency Management, Ibm Water Operations For Waternamics.