CVE-2016-3720 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
XML external entity (XXE) vulnerability in XmlMapper in the Data format extension for Jackson (aka jackson-dataformat-xml) allows attackers to have unspecified impact via unknown vectors.