CVE-2017-1758: ibm control_center
Vulnerability summary
CVE-2017-1758 is a high (CVSS 7.1) vulnerability in ibm control_center. EPSS estimates a 1.60% chance of exploitation in the next 30 days, higher than 75.6% of scored vulnerabilities.
Timeline
- 21-02-2018PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.60%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
-0.09 pp
From 1.69% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm3 products
- control_center6.0 | 6.1 | 6.1.1 | 6.0.0.0 | 6.0.0.1 | 6.1.0.0 | 6.1.0.1 | 6.1.1.0
- financial_transaction_manager3.0.2 | 3.0.4 | 3.1.0 | 3.0.3 | 3.0.2.0 | 3.0.2.1 | 3.0.3.0 | 3.0.4.0 | 3.1.0.0
- transformation_extender_advanced9.0
1 vendor · 3 products