CVE-2016-0250: XEE
XML external entity (XXE) vulnerability in IBM InfoSphere Information Governance Catalog 11.3 before 11.3.1.2 and 11.5 before 11.5.0.1 allows remote authenticated users to read arbitrary files or cause a denial of service via crafted XML data. IBM X-Force ID: 110510.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-0250?
CVE-2016-0250 is considered a high severity vulnerability due to its potential for remote file reading and denial of service.
How do I fix CVE-2016-0250?
To address CVE-2016-0250, upgrade IBM InfoSphere Information Governance Catalog to version 11.3.1.2 or 11.5.0.1 or later.
Who is affected by CVE-2016-0250?
CVE-2016-0250 affects users of IBM InfoSphere Information Governance Catalog versions prior to 11.3.1.2 and 11.5.0.1.
What type of attack does CVE-2016-0250 facilitate?
CVE-2016-0250 facilitates XML external entity (XXE) attacks that can lead to unauthorized file access and denial of service.
Can CVE-2016-0250 be exploited remotely?
Yes, CVE-2016-0250 can be exploited remotely by authenticated users using crafted XML data.