CVE-2016-6111: XEE
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6111?
CVE-2016-6111 has a medium severity rating due to its potential to enable denial of service attacks.
How do I fix CVE-2016-6111?
To fix CVE-2016-6111, apply the appropriate patches or updates provided by IBM for the affected versions of Curam Social Program Management.
What types of systems are affected by CVE-2016-6111?
CVE-2016-6111 affects IBM Curam Social Program Management versions 5.2 (SP1/SP4/SP6), 6.0, and 7.0.
What is the impact of exploiting CVE-2016-6111?
Exploiting CVE-2016-6111 can lead to a denial of service or exposure of sensitive information.
Can CVE-2016-6111 be exploited remotely?
Yes, CVE-2016-6111 can be exploited by a remote attacker through XML data processing.