VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 1, 2016· Updated Jun 17, 2026

CVE-2016-0288

CVE-2016-0288

Description

IBM Security AppScan Standard 8.7.x, 8.8.x, and 9.x before 9.0.3.2 and Security AppScan Enterprise allow remote authenticated users to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

13
  • IBM/Security Appscan11 versions
    cpe:2.3:a:ibm:security_appscan:8.7.0.0:*:*:*:standard:*:*:*+ 10 more
    • cpe:2.3:a:ibm:security_appscan:8.7.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.7.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:8.8.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.0.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.0.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.1.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.1.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.2.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.2.1:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.3.0:*:*:*:standard:*:*:*
    • cpe:2.3:a:ibm:security_appscan:9.0.3.1:*:*:*:standard:*:*:*
  • IBM/Security AppScan Enterprisellm-fuzzy
  • IBM/Security AppScan Standardllm-fuzzy
    Range: >=8.7, <=9.0.3.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.