CVE-2016-9707: IBM Rational Collaborative Lifecycle Management

High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days.

IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources. IBM Reference #: 2000784.

Affected products

IBM Rational Collaborative Lifecycle Management: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Doors Next Generation: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Engineering Lifecycle Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Quality Manager: version 4.0 only; version 4.0.0.1 only; version 4.0.0.2 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …
IBM Rational Rhapsody Design Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Software Architect Design Manager: version 4.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …
IBM Rational Team Concert: version 4.0 only; version 4.0.0.1 only; version 4.0.0.2 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; …

Published 2017-03-31. Last modified 2026-06-17.