490
VMScore

CVE-2016-0284

Published: 24/11/2016 Updated: 30/11/2016
CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8
CVSS v3 Base Score: 5.4 | Impact Score: 2.5 | Exploitability Score: 2.8
VMScore: 490
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P

Vulnerability Summary

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; Rational DOORS Next Generation 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 prior to 4.0.7 iFix11, 5.0 prior to 5.0.2 iFix18, and 6.0 prior to 6.0.2 iFix5 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm rational software architect design manager 4.0.4

ibm rational software architect design manager 4.0.5

ibm rational software architect design manager 6.0.2

ibm rational software architect design manager 4.0.1

ibm rational software architect design manager 4.0.3

ibm rational software architect design manager 5.0.2

ibm rational software architect design manager 6.0.0

ibm rational software architect design manager 6.0.1

ibm rational software architect design manager 4.0.0

ibm rational software architect design manager 4.0.2

ibm rational software architect design manager 5.0.0

ibm rational software architect design manager 5.0.1

ibm rational software architect design manager 4.0.6

ibm rational software architect design manager 4.0.7

ibm rational collaborative lifecycle management 4.0.0

ibm rational collaborative lifecycle management 4.0.1

ibm rational collaborative lifecycle management 3.0.1.6

ibm rational collaborative lifecycle management 5.0.1

ibm rational collaborative lifecycle management 5.0.2

ibm rational collaborative lifecycle management 4.0.6

ibm rational collaborative lifecycle management 4.0.7

ibm rational collaborative lifecycle management 6.0.0

ibm rational collaborative lifecycle management 5.0.0

ibm rational collaborative lifecycle management 4.0.4

ibm rational collaborative lifecycle management 4.0.5

ibm rational collaborative lifecycle management 6.0.1

ibm rational collaborative lifecycle management 6.0.2

ibm rational collaborative lifecycle management 4.0.2

ibm rational collaborative lifecycle management 4.0.3

ibm rational team concert 4.0.6

ibm rational team concert 4.0.7

ibm rational team concert 4.0.4

ibm rational team concert 4.0.5

ibm rational team concert 6.0.1

ibm rational team concert 6.0.2

ibm rational team concert 4.0.1

ibm rational team concert 4.0.2

ibm rational team concert 4.0.3

ibm rational team concert 5.0.2

ibm rational team concert 6.0.0

ibm rational team concert 3.0.1.6

ibm rational team concert 4.0.0

ibm rational team concert 5.0.0

ibm rational team concert 5.0.1

ibm rational quality manager 3.0.1.6

ibm rational quality manager 4.0.6

ibm rational quality manager 4.0.7

ibm rational quality manager 4.0.4

ibm rational quality manager 4.0.5

ibm rational quality manager 6.0.2

ibm rational quality manager 4.0.2

ibm rational quality manager 4.0.3

ibm rational quality manager 6.0.0

ibm rational quality manager 6.0.1

ibm rational quality manager 4.0.0

ibm rational quality manager 4.0.1

ibm rational quality manager 5.0.0

ibm rational quality manager 5.0.1

ibm rational quality manager 5.0.2

ibm rational doors next generation 4.0.0

ibm rational doors next generation 4.0.1

ibm rational doors next generation 5.0.0

ibm rational doors next generation 5.0.1

ibm rational doors next generation 4.0.6

ibm rational doors next generation 4.0.7

ibm rational doors next generation 4.0.4

ibm rational doors next generation 4.0.5

ibm rational doors next generation 6.0.1

ibm rational doors next generation 6.0.2

ibm rational doors next generation 4.0.2

ibm rational doors next generation 4.0.3

ibm rational doors next generation 5.0.2

ibm rational doors next generation 6.0.0

ibm rational engineering lifecycle manager 4.0.1

ibm rational engineering lifecycle manager 4.0.2

ibm rational engineering lifecycle manager 4.0.3

ibm rational engineering lifecycle manager 5.0.2

ibm rational engineering lifecycle manager 6.0.0

ibm rational engineering lifecycle manager 4.0.0

ibm rational engineering lifecycle manager 5.0.0

ibm rational engineering lifecycle manager 5.0.1

ibm rational engineering lifecycle manager 4.0.6

ibm rational engineering lifecycle manager 4.0.7

ibm rational engineering lifecycle manager 4.0.4

ibm rational engineering lifecycle manager 4.0.5

ibm rational engineering lifecycle manager 6.0.1

ibm rational engineering lifecycle manager 6.0.2

ibm rational rhapsody design manager 4.0.3

ibm rational rhapsody design manager 4.0.4

ibm rational rhapsody design manager 6.0.0

ibm rational rhapsody design manager 6.0.1

ibm rational rhapsody design manager 6.0.2

ibm rational rhapsody design manager 4.0.1

ibm rational rhapsody design manager 4.0.2

ibm rational rhapsody design manager 5.0.1

ibm rational rhapsody design manager 5.0.2

ibm rational rhapsody design manager 4.0

ibm rational rhapsody design manager 4.0.7

ibm rational rhapsody design manager 5.0.0

ibm rational rhapsody design manager 4.0.5

ibm rational rhapsody design manager 4.0.6