IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.

Project Subscriptions

Vendors Products
Rational Collaborative Lifecycle Management Subscribe
Rational Doors Next Generation Subscribe
Rational Engineering Lifecycle Manager Subscribe
Rational Quality Manager Subscribe
Rational Rhapsody Design Manager Subscribe
Rational Software Architect Design Manager Subscribe
Rational Team Concert Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2016-10508 IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: ibm

Published:

Updated: 2024-08-06T02:59:03.414Z

Reserved: 2016-12-01T00:00:00

Link: CVE-2016-9707

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-03-31T18:59:00.373

Modified: 2025-04-20T01:37:25.860

Link: CVE-2016-9707

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses