Vulnerability in Ibm Qradar Security Information And Event Manager
CVE-2016-2868
IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
EPSS: 0.009 (56.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 2.7 (Low). Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ibm Qradar_security_information_and_event_manager
- N/a — versions n/a
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2016-2868?
- CVE-2016-2868 is a low-severity vulnerability in Ibm Qradar Security Information And Event Manager. CVSS score: 2.7/10. Published 2016-07-02.
- How severe is CVE-2016-2868?
- Low severity. CVSS v3 base score is 2.7 out of 10.