CVE-2018-1421

Name of the Vulnerable Software and Affected Versions IBM WebSphere DataPower Appliances versions 7.1 through 7.6

Description The issue allows for a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this to expose sensitive information or consume memory resources.

Recommendations For versions 7.1 through 7.6, update to a version that includes the fix for this issue to prevent XXE attacks. As a temporary workaround, consider restricting XML data processing to minimize the risk of exploitation.