medium6.5
CVE-2016-3027
IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data.
Impact
IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Access Manager 9.0 Firmware | Versions 9.0.0, 9.0.0.1, 9.0.1.0 |
| Ibm | Security Access Manager For Mobile 8.0 Firmware | Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2 |
| Ibm | Security Access Manager For Web 8.0 Firmware | Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2 |