CVE-2016-0254

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML…

published June 7, 2017

CVSS
—
EPSS
2%
Percentile
79.3
In the wild
Unconfirmed
What it is

IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote authenticated attacker could exploit this vulnerability to consume all available CPU resources and cause a denial of service. IBM X-Force ID: 110563.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01895 · 79.3th percentile
Published
2017-06-07T17:00Z
EPSS history
Timeline
  • 07 JUN 17:00Z
    IBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML…
    cvelistv5