CVE-2016-6059

{"containers": {"cna": {"affected": [{"product": "InfoSphere Information Server", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "8.1"}, {"status": "affected", "version": "8.5"}, {"status": "affected", "version": "8.0"}, {"status": "affected", "version": "8.5.0.1"}, {"status": "affected", "version": "8.7"}, {"status": "affected", "version": "9.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "10.0"}, {"status": "affected", "version": "11.3"}, {"status": "affected", "version": "10"}, {"status": "affected", "version": "11.3.0.0"}, {"status": "affected", "version": "11.3.1.0"}, {"status": "affected", "version": "11.5"}]}], "datePublic": "2017-02-01T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources."}], "problemTypes": [{"descriptions": [{"description": "Obtain Information", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-02-02T10:57:01.000Z", "orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm"}, "references": [{"name": "94032", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/94032"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21991683"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@us.ibm.com", "ID": "CVE-2016-6059", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "InfoSphere Information Server", "version": {"version_data": [{"version_value": "8.1"}, {"version_value": "8.5"}, {"version_value": "8.0"}, {"version_value": "8.5.0.1"}, {"version_value": "8.7"}, {"version_value": "9.1"}, {"version_value": "8.0.1"}, {"version_value": "10.0"}, {"version_value": "11.3"}, {"version_value": "10"}, {"version_value": "11.3.0.0"}, {"version_value": "11.3.1.0"}, {"version_value": "11.5"}]}}]}, "vendor_name": "IBM Corporation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Obtain Information"}]}]}, "references": {"reference_data": [{"name": "94032", "refsource": "BID", "url": "http://www.securityfocus.com/bid/94032"}, {"name": "http://www.ibm.com/support/docview.wss?uid=swg21991683", "refsource": "CONFIRM", "url": "http://www.ibm.com/support/docview.wss?uid=swg21991683"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T01:22:20.536Z"}, "title": "CVE Program Container", "references": [{"name": "94032", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/94032"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21991683"}]}]}, "cveMetadata": {"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "assignerShortName": "ibm", "cveId": "CVE-2016-6059", "datePublished": "2017-02-01T20:00:00.000Z", "dateReserved": "2016-06-29T00:00:00.000Z", "dateUpdated": "2024-08-06T01:22:20.536Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "InfoSphere Information Server", "vendor": "IBM Corporation", "versions": [{"status": "affected", "version": "8.1"}, {"status": "affected", "version": "8.5"}, {"status": "affected", "version": "8.0"}, {"status": "affected", "version": "8.5.0.1"}, {"status": "affected", "version": "8.7"}, {"status": "affected", "version": "9.1"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "10.0"}, {"status": "affected", "version": "11.3"}, {"status": "affected", "version": "10"}, {"status": "affected", "version": "11.3.0.0"}, {"status": "affected", "version": "11.3.1.0"}, {"status": "affected", "version": "11.5"}]}], "source": "psirt@us.ibm.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.3:*:*:*:*:*:*:*", "matchCriteriaId": "BEE407E4-910C-4AF1-B87B-F9B01759DDFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "BD554818-742B-4033-B9FB-DD6E9BF76A8E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_datastage:11.5:*:*:*:*:*:*:*", "matchCriteriaId": "0025F291-9862-4638-B96D-1ABEC3C31890", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server:11.3:*:*:*:*:*:*:*", "matchCriteriaId": "9923389A-6B64-482B-A631-1B6B841CB9AE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server:11.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "45314D26-63E9-4795-ADE2-7F77F35C2D5E", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server:11.5:*:*:*:*:*:*:*", "matchCriteriaId": "83640E7E-851E-4C8F-ADDA-7CF4E1D11F58", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:infosphere_information_server_on_cloud:11.5:*:*:*:*:*:*:*", "matchCriteriaId": "88A5CF53-1A0C-4519-90A7-DFF6629820B0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources."}, {"lang": "es", "value": "IBM InfoSphere Information Server es vulnerable para una denegaci\u00f3n de servicio, provocado por un error XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podr\u00eda explotar esta vulnerabilidad para exponer informaci\u00f3n altamente sensible o consumir todos los recursos de memoria disponibles."}], "id": "CVE-2016-6059", "lastModified": "2026-06-17T00:50:25.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 7.8, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.2, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2017-02-01T20:59:02.083", "references": [{"source": "psirt@us.ibm.com", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21991683"}, {"source": "psirt@us.ibm.com", "tags": ["Technical Description", "VDB Entry"], "url": "http://www.securityfocus.com/bid/94032"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.ibm.com/support/docview.wss?uid=swg21991683"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Technical Description", "VDB Entry"], "url": "http://www.securityfocus.com/bid/94032"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-611"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}