Skip to content
Sign in
7.1 High

CVE-2018-1542 IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform…

Description

IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597.

Affected products and versions

Product Affected versions Fixed in
FileNet P8 Platform 5.5.0 No fix stated
FileNet P8 Platform 5.2.1 No fix stated

Other CVEs of FileNet P8 Platform

The 3 CVEs of FileNet P8 Platform →
CVE-2018-1556 IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting 5.4 Medium CVE-2018-1555 IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting 5.4 Medium
Track this CVE