Denial of Service Vulnerability in IBM WebSphere Cast Iron Solution

CVE-2016-9691

What is CVE-2016-9691?

The IBM WebSphere Cast Iron Solution versions 7.0.0 and 7.5.0.0 are susceptible to a denial of service through an XML External Entity Injection flaw. This vulnerability arises during the processing of XML data and can be exploited by a remote attacker. Such exploitation may lead to the disclosure of sensitive information or result in significant resource consumption, potentially crippling system performance.

References