CVE-2016-6111

Published on: 03/31/2017 12:00:00 AM UTC

Last Modified on: 03/23/2021 11:27:11 PM UTC

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Certain versions of Curam Social Program Management from Ibm contain the following vulnerability:

IBM Curam Social Program Management 6.0 and 7.0 are vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000833.

  • CVE-2016-6111 has been assigned by [email protected] to track the vulnerability - currently rated as - currently rated as CRITICAL severity.

CVSS3 Score: 9.1 - CRITICAL

Attack
Vector
Attack
Complexity
Privileges
Required
User
Interaction
NETWORK LOW NONE NONE
Scope Confidentiality
Impact
Integrity
Impact
Availability
Impact
UNCHANGED HIGH NONE HIGH

CVSS2 Score: 8.5 - HIGH

Access
Vector
Access
Complexity
Authentication
NETWORK LOW NONE
Confidentiality
Impact
Integrity
Impact
Availability
Impact
PARTIAL NONE COMPLETE

CVE References

Description Tags Link
IBM Cúram Social Program Management CVE-2016-6111 XML External Entity Injection Vulnerability Third Party Advisory
VDB Entry
cve.report (archive)
text/html
URL Logo BID 97244
Security Bulletin: Fix available for Vulnerability in XML External Entity Injection (XXE) affecting IBM Cúram Social Program Management (CVE-2016-6111) Patch
Vendor Advisory
www.ibm.com
text/html
URL Logo CONFIRM www.ibm.com/support/docview.wss?uid=swg22000833

Known Affected Configurations (CPE V2.3)

Type Vendor Product Version Update Edition Language
ApplicationIbmCuram Social Program Management5.2sp1AllAll
ApplicationIbmCuram Social Program Management5.2sp4AllAll
ApplicationIbmCuram Social Program Management5.2sp6AllAll
ApplicationIbmCuram Social Program Management6.0AllAllAll
ApplicationIbmCuram Social Program Management6.0sp2AllAll
ApplicationIbmCuram Social Program Management6.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.1AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.2AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.3AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.4AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.6AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.7AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.8AllAllAll
ApplicationIbmCuram Social Program Management6.0.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.1AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.2AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.3AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.4AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.6AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.7AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.8AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.9AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.1AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.2AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.3AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.0AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.1AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.2AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.3AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.1AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.2AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.3AllAllAll
ApplicationIbmCuram Social Program Management7.0.0.0AllAllAll
ApplicationIbmCuram Social Program Management5.2sp1AllAll
ApplicationIbmCuram Social Program Management5.2sp4AllAll
ApplicationIbmCuram Social Program Management5.2sp6AllAll
ApplicationIbmCuram Social Program Management6.0AllAllAll
ApplicationIbmCuram Social Program Management6.0sp2AllAll
ApplicationIbmCuram Social Program Management6.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.1AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.2AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.3AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.4AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.6AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.7AllAllAll
ApplicationIbmCuram Social Program Management6.0.4.8AllAllAll
ApplicationIbmCuram Social Program Management6.0.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.0AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.1AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.2AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.3AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.4AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.5AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.6AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.7AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.8AllAllAll
ApplicationIbmCuram Social Program Management6.0.5.9AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.1AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.2AllAllAll
ApplicationIbmCuram Social Program Management6.1.0.3AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.0AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.1AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.2AllAllAll
ApplicationIbmCuram Social Program Management6.1.1.3AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.0AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.1AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.2AllAllAll
ApplicationIbmCuram Social Program Management6.2.0.3AllAllAll
ApplicationIbmCuram Social Program Management7.0.0.0AllAllAll
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp1:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp4:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp6:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp1:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp4:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:5.2:sp6:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0:sp2:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.4.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.4:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.5:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.6:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.7:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.8:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.0.5.9:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.1.1.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.0:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.1:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.2:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:6.2.0.3:*:*:*:*:*:*:*:
  • cpe:2.3:a:ibm:curam_social_program_management:7.0.0.0:*:*:*:*:*:*:*: