CVE Feed

    Dashboard / CVE / CVE-2016-6059

    CVE-2016-6059

    IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.

    Published:Feb 1, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 1, 2017
    EPSS Score:0.00359
    CVSS Score:8.1

    Affected Products

    Vendor
    Ibm
    Product
    Infosphere Datastage
    Vendor
    Ibm
    Product
    Infosphere Information Server
    Vendor
    Ibm
    Product
    Infosphere Information Server On Cloud

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-221 Data Serialization External Entities Blowup

    Related CVEs

    CVE-2016-8982 (CVSS 5.3) — IBM InfoSphere Information Server stores sensitive information in URL parameters. This may lead to information…
    CVE-2016-8999 (CVSS 5.4) — IBM InfoSphere Information Server contains a Path-relative stylesheet import vulnerability that allows attacke…
    CVE-2016-9000 (CVSS 6.1) — IBM InfoSphere DataStage is vulnerable to cross-frame scripting, caused by insufficient HTML iframe protection…
    CVE-2015-1900 (CVSS 7.2) — IBM InfoSphere DataStage 8.1, 8.5, 8.7, 9.1, and 11.3 through 11.3.1.2 on UNIX allows local users to write to …
    CVE-2012-0701 (CVSS 6.5) — The client applications in the DataStage Administrator client in InfoSphere DataStage in IBM InfoSphere Inform…
    CVE-2011-3123 (CVSS 7.2) — IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 a…
    CVE-2011-3124 (CVSS 7.2) — IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix and Linux, as used in IBM InfoSphere DataStage 8.5 a…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High