Not rated
CVE-2016-6111 IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External…
Description
IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cram Social Program Management | 7.0.0 | No fix stated |
| Cram Social Program Management | 6.2.0 | No fix stated |
| Cram Social Program Management 6.1 | 6.1 → 6.1.1 | No fix stated |
| Cram Social Program Management 6.0 | 6.0 → 6.0.5 | No fix stated |
| Cram Social Program Management 5.2 | 5.2 → 5.2.6 | No fix stated |
| Cram Social Program Management | 4.5 | No fix stated |