VYPR
← All advisories
Medium severity5.4NVD Advisory· Published Nov 24, 2016· Updated Jun 17, 2026

CVE-2016-0284

CVE-2016-0284

Description

The XML parser in IBM Rational Collaborative Lifecycle Management 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Quality Manager 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Team Concert 3.0.1.6 before iFix8, 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational DOORS Next Generation 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Engineering Lifecycle Manager 4.x before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; Rational Rhapsody Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5; and Rational Software Architect Design Manager 4.0 before 4.0.7 iFix11, 5.0 before 5.0.2 iFix18, and 6.0 before 6.0.2 iFix5 allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

108
  • IBM/Rational Collaborative Lifecycle Management16 versions
    cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 3.0.1.6 iFix8, < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Doors Next Generation15 versions
    cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Engineering Lifecycle Manager15 versions
    cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Quality Manager16 versions
    cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:ibm:rational_quality_manager:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 3.0.1.6 iFix8, < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Rhapsody Design Manager15 versions
    cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Software Architect Design Manager15 versions
    cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_software_architect_design_manager:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5
  • IBM/Rational Team Concert16 versions
    cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*+ 15 more
    • cpe:2.3:a:ibm:rational_team_concert:3.0.1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:4.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:5.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:6.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*
    • (no CPE)range: < 3.0.1.6 iFix8, < 4.0.7 iFix11, < 5.0.2 iFix18, < 6.0.2 iFix5

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.