Test ID:	1.3.6.1.4.1.25623.1.0.106202
Category:	Web application abuses
Title:	IBM WebSphere Portal XML External Entity DoS Vulnerability
Summary:	IBM WebSphere Portal is prone to a denial of service vulnerability.
Description:	Summary: IBM WebSphere Portal is prone to a denial of service vulnerability. Vulnerability Insight: The XML parser allows remote authenticated users to read arbitrary files or cause a denial of service via an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. Vulnerability Impact: An authenticated attacker may read arbitrary files or cause a denial of service condition. Affected Software/OS: WebSphere Portal 8.5 an 8.0 Solution: For 8.5.0 upgrade to Cumulative Fix 10, for 8.0.0 through 8.0.0.1 upgrade to Fix Pack 8.0.0.1 with Cumulative Fix 20. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-0245 AIX APAR: PI56682 http://www-01.ibm.com/support/docview.wss?uid=swg1PI56682
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.