CVE-2016-6059

Published: Feb 1, 2017Modified: May 13, 2026

8.1

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

IBM InfoSphere Information Server is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.

Affected (7)

Products: Ibm: Infosphere Datastage, Infosphere Information Server, Infosphere Information Server On Cloud

Ibm

3 products

Infosphere Datastage

Infosphere Information Server

Infosphere Information Server On Cloud

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Infosphere Datastage	Version 11.3.1
Ibm Infosphere Datastage	Version 11.3
Ibm Infosphere Datastage	Version 11.5
Ibm Infosphere Information Server	Version 11.3.1
Ibm Infosphere Information Server	Version 11.3
Ibm Infosphere Information Server	Version 11.5
Ibm Infosphere Information Server On Cloud	Version 11.5