What is CVE-2016-3039?

CVE-2016-3039 is a high-severity vulnerability in IBM Traveler. CVSS score: 8.1/10. Published 2016-07-17.

How severe is CVE-2016-3039?

High severity. CVSS v3 base score is 8.1 out of 10.

Vulnerability in IBM Traveler

CVE-2016-3039

IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consumption) via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

Ibm Traveler — versions 8.5.3, 9.0, 9.0.1
N/a — versions n/a

References

psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)
psirt@us.ibm.com (vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-3039?: CVE-2016-3039 is a high-severity vulnerability in IBM Traveler. CVSS score: 8.1/10. Published 2016-07-17.
How severe is CVE-2016-3039?: High severity. CVSS v3 base score is 8.1 out of 10.