CVE-2016-0369 XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 1120...
LowCVSS 2.7
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm forms experience builder | = 8.5 | No fix listed |
| ibm forms experience builder | = 8.5.1 | No fix listed |
| ibm forms experience builder | = 8.6.0 | No fix listed |
References
- www-01.ibm.com patch vendor-advisory
- ibm-forms-cve20160369-info-disc(112088) vdb-entry vendor-advisory