CVE-2016-3033

IBM AppScan Source versions 8.7–9.0.3.3 are affected by a XML External Entity (XXE) vulnerability. The issue arises when processing an XML document with an external entity declaration and an entity reference, allowing remote authenticated users to read arbitrary files or cause a denial of service...