Security Bulletin: XXE and XmlBomb vulnerability in FileNet Workplace (CVE-2016-3055)

Summary FileNet Workplace is susceptible to the XXE and XmlBomb vulnerability. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-3055 DESCRIPTION: IBM FileNet Workplace is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error when processing XML dat...

CVE-2016-3055

IBM FileNet Workplace 4.0.2 is affected by CVE-2016-3055 due to an XML External Entity (XXE) flaw in processing XML data, which could allow remote authenticated users to read arbitrary files or cause a memory-based denial of service. Affected version: FileNet Workplace 4.0.2 (before 4.0.2.14 LA01...