CVE-2017-1254: IBM Security Guardium

High severity, CVSS 7.1. EPSS: 1.6% chance of exploitation in the next 30 days.

IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume memory resources. IBM X-Force ID: 124634.

Affected products

• IBM Security Guardium: version 10.0 only; version 10.0.1 only; version 10.1 only; version 10.1.2 only

Published 2017-07-05. Last modified 2026-06-17.