XML External Entity (XXE) Vulnerability in IBM InfoSphere Information Governance Catalog

XML External Entity (XXE) Vulnerability in IBM InfoSphere Information Governance Catalog

CVE-2016-0250 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:N/A:P

XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510.

Learn more about our Cis Benchmark Audit For Ibm I.