IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 258786.
Metrics
Affected Vendors & Products
References
History
Thu, 26 Sep 2024 19:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published: 2023-09-04T23:45:38.833Z
Updated: 2024-09-26T18:29:59.332Z
Reserved: 2023-06-20T02:24:14.838Z
Link: CVE-2023-35892
Vulnrichment
Updated: 2024-08-02T16:37:39.913Z
NVD
Status : Modified
Published: 2023-09-05T00:15:07.833
Modified: 2024-11-21T08:08:56.190
Link: CVE-2023-35892
Redhat
No data.