CVE-2016-9691

Severity: high (CVSS 8.6 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-05-05 · updated 2026-06-17
Weakness: CWE-611

Description

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 119515.

Affected products

IBM Corporation WebSphere Cast Iron Cloud integration: 7.0.0, 7.0.0.1, 7.0.0.2, 7.5.0.0, 7.5.0.1, 7.5.1.0

References

http://www.ibm.com/support/docview.wss?uid=swg21998014
http://www.securityfocus.com/bid/98338
http://www.ibm.com/support/docview.wss?uid=swg21998014
http://www.securityfocus.com/bid/98338

Get alerted when CVE-2016-9691 or the next vulnerability affects your stack