CVE-2016-9691: IBM WebSphere Cast Iron Solution

High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days.

IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM X-Force ID: 119515.

Affected products

• IBM WebSphere Cast Iron Solution: version 7.0.0 only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.5.0.0 only; version 7.5.0.1 only; version 7.5.1.0 only

Published 2017-05-05. Last modified 2026-06-17.