CoreCVE
Back

HIGH

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data

Published Jul 6, 2018

Description

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-611

XXE

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ibm
Published Jul 6, 2018
Updated Sep 17, 2024
Reserved Dec 13, 2017
Link CVE-2018-1542
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-1542
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-1542
ENISA EUVD
Assigner ibm
Published Jul 6, 2018
Updated Sep 17, 2024
Exploited since n/a
Link EUVD-2018-12121
EUVD-2018-12121