CVE-2016-2868

Published: Jul 2, 2016Modified: May 6, 2026

2.7

Vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

IBM Security QRadar SIEM 7.2.x before 7.2.7 allows remote authenticated administrators to read arbitrary files via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected (1)

Products: Ibm: Qradar Security Information And Event Manager

Ibm

1 product

Qradar Security Information And Event Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Qradar Security Information And Event Manager	Up to 7.2.6

References (2)

http://www-01.ibm.com/support/docview.wss?uid=swg21985774

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21985774

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.