CVE-2016-0319

published 2016-11-25

CVE-2016-0319: The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

The XML parser in Lifecycle Query Engine (LQE) in IBM Jazz Reporting Service 6.0 and 6.0.1 before 6.0.1 iFix006 allows remote authenticated administrators to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	jazz_reporting_service	—	—
ibm	jazz_reporting_service	—	—

CWE-284