CVE-2016-6805

CVE-2016-6805 describes a Medium severity XML External Entity (XXE) vulnerability in Apache Ignite versions prior to 1.9, allowing man-in-the-middle attackers to read arbitrary files through manipulated update-notifier documents. This vulnerability has a CVSSv3 score of 5.9, indicating a network-based attack with high complexity, requiring no user interaction, and resulting in high confidentiality impact. Despite its potential for data exposure, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.