CVE-2016-0369 in Forms Experience Builder

Riassunto

di MITRE

XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 08/12/2015
• Divulgazione: 21/02/2018
• Moderazione: accettato
• Voce: VDB-113660
• CPE: pronto
• CWE: CWE-611 (confermato)
• CVSS: 2.7 (NVD)
• EPSS: 0.01004
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-0369
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-0369
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-0369/