CVE-2016-0219

CWE-611 — XML External Entity (XXE)4 documents4 sources
Severity
6.5MEDIUM
EPSS
0.4%
top 39.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
IBM Rational Collaborative Lifecycle ManagementIBM Rational Doors Next GenerationIBM Rational Engineering Lifecycle Manager+5 more
Timeline
PublishedJan 16
Latest updateMay 14

Description

XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages8 packages

▶NVDibm/rational_team_concert23 versions+22
▶NVDibm/rational_quality_manager22 versions+21

🔴Vulnerability Details

2
GHSA
GHSA-j673-qxgg-6q9g: XML external entity (XXE) vulnerability in IBM Rational Team Concert 3↗2022-05-14
▶
CVEList
CVE-2016-0219: XML external entity (XXE) vulnerability in IBM Rational Team Concert 3↗2018-01-16
▶

💬Community

1
Bugzilla
CVE-2016-8704 memcached: Server append/prepend remote code execution↗2016-11-01
▶