CVE-2024-54171

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Feb 6, 2025
CWE ID 611

Summary

CVE-2024-54171 is a vulnerability affecting IBM EntireX 11.1. This issue allows authenticated attackers to carry out XML External Entity (XXE) injections while processing XML data. Such an attack could lead to the exposure of sensitive information or cause memory consumption, posing a potential security risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share