Vulnerability Details CVE-2013-5452
IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.4%
CVSS Severity
CVSS v2 Score 3.5
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949
- http://www-01.ibm.com/support/docview.wss?uid=swg21660343
- http://www-304.ibm.com/support/docview.wss?uid=swg21963014
- http://www.securitytracker.com/id/1033734
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88192
- http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949
- http://www-01.ibm.com/support/docview.wss?uid=swg21660343
- http://www-304.ibm.com/support/docview.wss?uid=swg21963014
- http://www.securitytracker.com/id/1033734
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88192
Products affected by CVE-2013-5452
-
cpe:2.3:a:ibm:filenet_business_process_framework:4.1.0