Skip to content
OpenAdvisories
Unscored CVE-2016-3027 EUVD-2016-4100GHSA-q9gv-r7q5-76r2

IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when proce…

Published Feb 1, 2017 · Updated Aug 5, 2024 · Assigned by ibm

Vendor: IBM Product: Access Manager

Description

IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.

Affected products

VendorProductAffectedFixed
IBM Access Manager 9.0, 9.0.0.1, 9.0.1, 7.0.0, 8.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4, 8.0.0.5, 8.0.1, 8.0.1.2, 8.0.1.3, 8.0.1.4, 9.0.0, 9.0.1.0 —

References