CVE-2016-6111

Critical

Published: 31/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM Curam Social Program Management versions 6.0 and 7.0 are vulnerable to a denial of service caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume all available memory resources.

Risk Assessment

This vulnerability could lead to serious consequences for the organization, including loss of confidential data and disruption of system operations.

Recommendation

It is recommended to upgrade to the latest version of IBM Curam Social Program Management and implement security measures to mitigate XXE attacks.

Original NVD description (English source)

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.