CVE-2016-1789

—

CVSS 3.0

5.5 medium

EPSS

<1%p59

Published

Apr 5, 2016 (Apr 5, 2016)

Modified

Jun 17, 2026

Description

Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vendors: apple
Products: ibooks author
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.