CVE-2016-2868

LOW

IBM QRadar Security Information and Event Manager < 7.2.7 - Authenticated XML External Entity Injection

Title source: llm
STIX 2.1

Description

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

References (1)

Core 1
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21985774

Scores

CVSS v3 2.7
EPSS 0.0090
EPSS Percentile 55.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (1)
ibm/qradar_security_information_and_event_manager < 7.2.6
Published Jul 02, 2016
Tracked Since Feb 18, 2026