CVE-2016-9724: XEE

Published Mar 7, 2017

Updated

IBM QRadar 7.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1999537.

Affected Software

9 affected components

IBM QRadar Security Information and Event Manager=7.2.0

IBM QRadar Security Information and Event Manager=7.2.1

IBM QRadar Security Information and Event Manager=7.2.2

IBM QRadar Security Information and Event Manager=7.2.3

IBM QRadar Security Information and Event Manager=7.2.4

IBM QRadar Security Information and Event Manager=7.2.5

IBM QRadar Security Information and Event Manager=7.2.6

IBM QRadar Security Information and Event Manager=7.2.7

IBM QRadar Security Information and Event Manager=7.2.8

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg21999537

Event History

Mar 7, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2016-9724?

CVE-2016-9724 is classified as a high-severity vulnerability due to its potential for denial of service and sensitive information exposure.

How do I fix CVE-2016-9724?

To fix CVE-2016-9724, upgrade your IBM QRadar Security Information and Event Manager to a patched version that addresses this vulnerability.

Who is affected by CVE-2016-9724?

CVE-2016-9724 affects IBM QRadar Security Information and Event Manager versions 7.2.0 to 7.2.8.

What types of attacks can exploit CVE-2016-9724?

CVE-2016-9724 can be exploited by remote attackers to perform denial of service attacks and extract sensitive information through XML External Entity Injection.

Is CVE-2016-9724 a local or remote vulnerability?

CVE-2016-9724 is a remote vulnerability, allowing attackers to exploit the system from a distance without physical access.