Vulnerability Details CVE-2016-0369
XML external entity (XXE) vulnerability in IBM Forms Experience Builder 8.5, 8.5.1, and 8.6 allows remote authenticated users to obtain sensitive information via crafted XML data. IBM X-Force ID: 112088.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.1%
CVSS Severity
CVSS v3 Score 2.7
CVSS v2 Score 4.0
References
Products affected by CVE-2016-0369
-
cpe:2.3:a:ibm:forms_experience_builder:8.5
-
cpe:2.3:a:ibm:forms_experience_builder:8.5.1
-
cpe:2.3:a:ibm:forms_experience_builder:8.6.0