CVE-2018-1364

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

IBM Content Navigator 2.0 and 3.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 137449.

Metrics

CVSS 3.0 8.2/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-611

Affected software

No affected versions have been published.

Timeline

Published
Jan 29, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-136407.5The mintToken function of a smart contract implementation for EthereumSmart, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136417.5The mintToken function of a smart contract implementation for MVGcoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136427.5The mintToken function of a smart contract implementation for SECoin, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-136437.5The mintToken function of a smart contract implementation for GCRTokenERC20, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136447.5The mintToken function of a smart contract implementation for RoyalClassicCoin, an Ethereum token, has an integer overflow that allows the oCVE-2018-136457.5The mintToken function of a smart contract implementation for Fiocoin, an Ethereum token, has an integer overflow that allows the owner of tCVE-2018-136467.5The mintToken function of a smart contract implementation for Datiac, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-136477.5The mintToken function of a smart contract implementation for TrueGoldCoinToken, an Ethereum token, has an integer overflow that allows the CVE-2018-136487.5The mintToken function of a smart contract implementation for BGC, an Ethereum token, has an integer overflow that allows the owner of the cCVE-2018-136497.5The mintToken function of a smart contract implementation for Deploy, an Ethereum token, has an integer overflow that allows the owner of thCVE-2018-136507.5The mintToken function of a smart contract implementation for BitmaxerToken, an Ethereum token, has an integer overflow that allows the owneCVE-2018-136517.5The mintToken function of a smart contract implementation for MicoinNetworkToken, an Ethereum token, has an integer overflow that allows the
CVE-2018-1364: High severity, CVSS 8.2 | Vulnix