Medium severity5.5NVD Advisory· Published Apr 5, 2016· Updated May 6, 2026

CVE-2016-1789

Description

Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

Apple Inc./Ibooks Author
cpe:2.3:a:apple:ibooks_author:*:*:*:*:*:*:*:*
Range: <=2.4.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

support.apple.com/kb/HT206224nvdVendor Advisory
lists.apple.com/archives/security-announce/2016/Mar/msg00008.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000