CVE-2016-2908
—CVSS 3.0
9.1 critical
EPSS
3%p88
Published
()
Modified
Description
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.
- Vendors
- ibm
- Products
- security access manager 9.0 firmware, security access manager for mobile 8.0 firmware, security access manager for web 8.0 firmware
- Weakness
- CWE-611
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.