CVE-2016-2932

EUVD-2016-4005
IBM BigFix Remote Control before 9.1.3 allows remote attackers to conduct XML injection attacks via unspecified vectors.
aka Blind XPath Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 52%
Affected Products (NVD)
VendorProductVersion
ibmbigfix_remote_control
𝑥
≤ 9.1.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89787
http://www-01.ibm.com/support/docview.wss?uid=swg21991882
http://www.securityfocus.com/bid/94983
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89787
http://www-01.ibm.com/support/docview.wss?uid=swg21991882
http://www.securityfocus.com/bid/94983