Lucene search

IbmCVE-2015-0133

HistoryMar 13, 2015 - 1:59 a.m.

CVE-2015-0133

2015-03-1301:59:25

ibm

web.nvd.nist.gov

ibm

websphere commerce

7.0

feature pack

xml external entity

xxe

cve-2015-0133

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

69.1%

JSON

IBM WebSphere Commerce 7.0 Feature Pack 4 through 8 allows remote attackers to read arbitrary files and possibly obtain administrative privileges via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected configurations

Nvd

Node

ibmwebsphere_commerceMatch7.0

VendorProductVersionCPE
ibmwebsphere_commerce7.0cpe:2.3:a:ibm:websphere_commerce:7.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_commerce	7.0	cpe:2.3:a:ibm:websphere_commerce:7.0:::::::*

References

www-01.ibm.com/support/docview.wss?uid=swg1JR52499

www-01.ibm.com/support/docview.wss?uid=swg21696242

www.securitytracker.com/id/1031881

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.9

Confidence

Low

EPSS

0.003

Percentile

69.1%

JSON

Related for CVE-2015-0133