CVE-2018-1542high

CVE-2018-1542: high-severity vulnerability in IBM FileNet P8 Platform

Published · Updated

Follow this CVE+ Monitor FileNet P8 Platform

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.1epss 2.4%
IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597.
CVSS:3.0/A:L/AC:L/AV:N/C:H/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · FileNet P8 Platform
Related CVEs — IBM FileNet P8 Platform

In the same product, most dangerous first.

CVE-2018-1556MEDIUMCVE-2018-1556EPSS 1.0%CVE-2018-1555MEDIUMCVE-2018-1555EPSS 1.0%