CVE-2024-27266

Summary

CVE-2024-27266 is a vulnerability affecting IBM Maximo Application Suite 7.6.1.3. This issue allows for XML External Entity Injection (XXE) attacks, enabling remote attackers to manipulate XML data during processing. The consequence can be the exposure of sensitive information or the consumption of excessive memory resources. IBM X-Force has assigned the ID 284566 to this security flaw.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.