IBM Security Bulletin:AppScan Source vulnerable to denial of service caused by an XML External Entity (CVE-2016-3033)
IBM AppScan Source is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data
CVE(s): CVE-2016-3033
Affected product(s) and affected version(s):
IBM Security AppScan Source 8.7, 8.8, 9.0, 9.0.1, 9.0.2, 9.0.3
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2bgv0ap
X-Force Database: http://ift.tt/2b5AMPF
from IBM Product Security Incident Response Team http://ift.tt/2bguVUd