VULNERABILITY INTELLIGENCE

CVE-2016-1789

CVSS score5.5 MEDIUM
EPSS probability0.94%
CISA KEVNot currently listed
Published2016-04-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Description

Apple iBooks Author before 2.4.1 allows remote attackers to read arbitrary files via an iBooks Author file containing an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Primary references