CVE-2018-1542

CWE-611 — XML External Entity (XXE)4 documents4 sources

Severity

7.1HIGH

EPSS

0.4%

top 37.24%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Filenet P8 Platform IBM Content Foundation IBM Filenet Content Manager

Timeline

PublishedJul 6

Latest updateMay 13

Description

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:LExploitability: 2.8 | Impact: 4.2

Affected Packages3 packages

▶NVDibm/content_foundation5.2.1, 5.5.0+1

▶NVDibm/filenet_content_manager5.2.1, 5.5.0+1

▶CVEListV5ibm/filenet_p8_platform5.2.1, 5.5.0+1

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-7hc6-6vrh-xwqx: IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5↗2022-05-13

▶

CVEList

CVE-2018-1542: IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5↗2018-07-06

▶

💥Exploits & PoCs

Exploit-DB

BMC BladeLogic 8.3.00.64 - Remote Command Execution↗2018-01-26

▶