VulnerabilityModified
CVE-2016-0369
XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data.
LOW 2.7EPSS 0.98%
Does this matter?
Lower severity and a low EPSS score (0.98%). Track it; it rarely justifies an emergency change on its own.
Description
XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.
- CVSS 3.0
- 2.7 LOWCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.98% probability · 60th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-611
- Affected
- ibm/forms experience builder
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21988727Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/112088VDB Entry, Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21988727Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/112088VDB Entry, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.