VULNERABILITY INTELLIGENCE

CVE-2016-2868

CVSS score2.7 LOW
EPSS probability0.90%
CISA KEVNot currently listed
Published2016-07-02
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Description

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Primary references