CVE-2016-9698

2017-06-0821:00:00

ibm

www.cve.org

AI Score

8.2

Confidence

High

EPSS

0.003

Percentile

67.9%

JSON

IBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 1999960.

CNA Affected

[
  {
    "product": "Rational Rhapsody Design Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.2"
      },
      {
        "status": "affected",
        "version": "4.0"
      },
      {
        "status": "affected",
        "version": "4.0.1"
      },
      {
        "status": "affected",
        "version": "4.0.3"
      },
      {
        "status": "affected",
        "version": "4.0.4"
      },
      {
        "status": "affected",
        "version": "4.0.5"
      },
      {
        "status": "affected",
        "version": "4.0.6"
      },
      {
        "status": "affected",
        "version": "5.0"
      },
      {
        "status": "affected",
        "version": "5.0.1"
      },
      {
        "status": "affected",
        "version": "6.0"
      },
      {
        "status": "affected",
        "version": "6.0.1"
      },
      {
        "status": "affected",
        "version": "6.0.2"
      },
      {
        "status": "affected",
        "version": "6.0.3"
      }
    ]
  },
  {
    "product": "Rational Rhapsody Design Manager ",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.7"
      },
      {
        "status": "affected",
        "version": "5.0.2"
      }
    ]
  }
]