IBM WebSphere Cast Iron Solution vulnerabilities

2 CVEs affecting IBM WebSphere Cast Iron Solution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-9692, published 2017-05-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-9692, published 2017-05-05. High severity, CVSS 8.6. EPSS: 1.6% chance of exploitation in the next 30 days. IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to External Service Interaction attack, caused by improper validation of user-supplied input. A remote attacker could exploit this…
CVE-2016-9691, published 2017-05-05. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. IBM WebSphere Cast Iron Solution 7.0.0 and 7.5.0.0 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could…