cbcvebase.
CVE-2015-7461
published 2018-03-20

CVE-2015-7461: XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a…

medium6.5CVSS 3.0
AVNACLPRLUINSUCNINAH
XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357.

Affected

4 ranges
VendorProductVersion rangeFixed in
ibmconnections<= 3.0.1.1
ibmconnections
ibmconnections
ibmconnections