6.5

CVE-2016-0219

XML external entity (XXE) vulnerability in IBM Rational Team Concert 3.0 before 3.0.1.6 iFix7 Interim Fix 1, 4.0 before 4.0.7 iFix10, 5.0 before 5.0.2 iFix15, and 6.0 before 6.0.1 iFix4 allows remote authenticated users to cause a denial of service via crafted XML data. IBM X-Force ID: 109693.

Data is provided by the National Vulnerability Database (NVD)
IbmRational Quality Manager Version3.0
IbmRational Quality Manager Version3.0.1
IbmRational Quality Manager Version3.0.1.1
IbmRational Quality Manager Version3.0.1.2
IbmRational Quality Manager Version3.0.1.3
IbmRational Quality Manager Version3.0.1.4
IbmRational Quality Manager Version3.0.1.5
IbmRational Quality Manager Version3.0.1.6
IbmRational Quality Manager Version4.0
IbmRational Quality Manager Version4.0.0.1
IbmRational Quality Manager Version4.0.0.2
IbmRational Quality Manager Version4.0.1
IbmRational Quality Manager Version4.0.2
IbmRational Quality Manager Version4.0.3
IbmRational Quality Manager Version4.0.4
IbmRational Quality Manager Version4.0.5
IbmRational Quality Manager Version4.0.7
IbmRational Quality Manager Version5.0
IbmRational Quality Manager Version5.0.1
IbmRational Quality Manager Version5.0.2
IbmRational Quality Manager Version6.0
IbmRational Quality Manager Version6.0.1
IbmRational Requirements Composer Version3.0.1.1
IbmRational Requirements Composer Version3.0.1.2
IbmRational Requirements Composer Version3.0.1.3
IbmRational Requirements Composer Version3.0.1.4
IbmRational Requirements Composer Version3.0.1.5
IbmRational Requirements Composer Version3.0.1.6
IbmRational Team Concert Version3.0
IbmRational Team Concert Version3.0.1
IbmRational Team Concert Version3.0.1.1
IbmRational Team Concert Version3.0.1.2
IbmRational Team Concert Version3.0.1.3
IbmRational Team Concert Version3.0.1.4
IbmRational Team Concert Version3.0.1.5
IbmRational Team Concert Version3.0.1.6
IbmRational Team Concert Version4.0
IbmRational Team Concert Version4.0.0.1
IbmRational Team Concert Version4.0.0.2
IbmRational Team Concert Version4.0.1
IbmRational Team Concert Version4.0.2
IbmRational Team Concert Version4.0.3
IbmRational Team Concert Version4.0.4
IbmRational Team Concert Version4.0.5
IbmRational Team Concert Version4.0.6
IbmRational Team Concert Version4.0.7
IbmRational Team Concert Version5.0
IbmRational Team Concert Version5.0.1
IbmRational Team Concert Version5.0.2
IbmRational Team Concert Version6.0
IbmRational Team Concert Version6.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.4% 0.574
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:N/I:N/A:P
CWE-611 Improper Restriction of XML External Entity Reference

The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.