IBM Security Bulletin: XXE injection vulnerability in IBM API Connect (CVE-2017-1322)
An XML External Entity injection (XXE) vulnerability is exposed in IBM API Connect.
CVE(s): CVE-2017-1322
Affected product(s) and affected version(s):
IBM API Connect V5.0.0.0 – V5.0.7.0
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2tBv8tF
X-Force Database: http://ift.tt/2t2jTxA
The post IBM Security Bulletin: XXE injection vulnerability in IBM API Connect (CVE-2017-1322) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team http://ift.tt/2tBuZX3