CVE-2017-1192

Published: Aug 10, 2017Modified: May 13, 2026

8.2

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 123663.

Affected (1)

Products: Ibm: Sterling B2b Integrator

1 product

Sterling B2b Integrator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Sterling B2b Integrator	Version 5.2

Related CWEs

Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.

References (6)

http://www.ibm.com/support/docview.wss?uid=swg22004267

Source: psirt@us.ibm.com

Vendor Advisory

http://www.securityfocus.com/bid/102864

Source: psirt@us.ibm.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/123663

Source: psirt@us.ibm.com

VDB Entry

http://www.ibm.com/support/docview.wss?uid=swg22004267

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/102864

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/123663

Source: af854a3a-2127-422b-91ae-364da2661108

VDB Entry

Timeline

No history available yet.