CVE-2016-8980
HighSummary
IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.
Risk Assessment
This vulnerability could lead to serious availability issues and the exposure of confidential data, posing a threat to the organization's security.
Recommendation
It is recommended to update IBM BigFix Inventory to the latest version to mitigate this vulnerability and implement appropriate security measures to protect against XXE attacks.
Other vulnerabilities in IBM BigFix Inventory v9
Original NVD description (English source)
IBM BigFix Inventory v9 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.