IBM Business Process Manager 7.5/8.0/8.5 XML Data xml external entity reference

A vulnerability has been found in IBM Business Process Manager 7.5/8.0/8.5 (Business Process Management Software) and classified as critical. Affected by this vulnerability is an unknown code of the component XML Data Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10820142	01/14/2021	VulD...	person_name	Sergio Ortega Fernndez	securityfocus.com	01/14/2021	accepted	70
10820141	01/14/2021	VulD...	cvss2_nvd_basescore	7.5	nist.gov	01/14/2021	accepted	90
10820140	01/14/2021	VulD...	price_0day	$5k-$25k	see documentation	01/14/2021	accepted	90
10820139	01/14/2021	VulD...	xforce	130156	cve.mitre.org	01/14/2021	accepted	70
7141742	11/20/2019	VulD...	securityfocus_class	Input Validation Error	securityfocus.com	11/20/2019	accepted	100
7141741	11/20/2019	VulD...	securityfocus_date	1506038400 (09/22/2017)	securityfocus.com	11/20/2019	accepted	100
7141733	11/20/2019	VulD...	confirm_url	http://www.ibm.com/support/docview.wss?uid=swg22007346	ibm.com	11/20/2019	accepted	100
7141693	11/20/2019	VulD...	discoverydate	1506297600		11/20/2019	accepted	100
7141755	09/27/2017	VulD...	cvss3_nvd_basescore	8.1	nist.gov	09/27/2017	accepted	90
7141754	09/27/2017	VulD...	0day_days	1		09/27/2017	accepted	90
7141753	09/27/2017	VulD...	cvss3_vuldb_rc	X		09/27/2017	accepted	90
7141752	09/27/2017	VulD...	cvss3_vuldb_rl	X		09/27/2017	accepted	90
7141751	09/27/2017	VulD...	cvss3_vuldb_e	X		09/27/2017	accepted	90
7141750	09/27/2017	VulD...	cvss2_vuldb_rc	ND		09/27/2017	accepted	90
7141749	09/27/2017	VulD...	cvss2_vuldb_rl	ND		09/27/2017	accepted	90
7141748	09/27/2017	VulD...	cvss2_vuldb_e	ND		09/27/2017	accepted	90
7141747	09/27/2017	VulD...	location	Website		09/27/2017	accepted	90
7141746	09/27/2017	VulD...	seealso	107170 107169 107168		09/27/2017	accepted	100
7141745	09/27/2017	VulD...	qualys_title	IBM Business Process Manager XML External Entity (XXE) injection vulnerability (swg22007346)	qualys.com	09/27/2017	accepted	100
7141744	09/27/2017	VulD...	qualys_id	370606	qualys.com	09/27/2017	accepted	100