7.5
CVSSv2

CVE-2017-1103

Published: 10/05/2017 Updated: 15/05/2017
CVSS v2 Base Score: 7.5 | Impact Score: 7.8 | Exploitability Score: 8
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 668
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:C

Vulnerability Summary

IBM Team Concert (RTC) is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 120665.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm rational team concert 4.0.5

ibm rational team concert 4.0.6

ibm rational team concert 4.0.7

ibm rational team concert 5.0.0

ibm rational team concert 6.0.1

ibm rational team concert 6.0.2

ibm rational team concert 6.0.0

ibm rational team concert 6.0.3

ibm rational team concert 4.0.0

ibm rational team concert 4.0.2

ibm rational team concert 4.0.4

ibm rational team concert 5.0.1

ibm rational team concert 4.0.1

ibm rational team concert 4.0.3

ibm rational team concert 5.0.2

ibm rational quality manager 4.0.4

ibm rational quality manager 4.0.5

ibm rational quality manager 4.0.6

ibm rational quality manager 4.0.7

ibm rational quality manager 6.0.0

ibm rational quality manager 6.0.1

ibm rational quality manager 6.0.2

ibm rational quality manager 4.0.0

ibm rational quality manager 4.0.2

ibm rational quality manager 5.0.1

ibm rational quality manager 4.0.1

ibm rational quality manager 4.0.3

ibm rational quality manager 5.0.0

ibm rational quality manager 5.0.2