Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-5038

IBM Connections 3.x before 3.0.1.1 CR3, 4.0 before CR4, 4.5 before CR5, and 5.0 before CR3 does not properly detect recursion during XML entity expansion, which allows remote attackers to cause a denial of service (CPU consumption and application crash) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 7.8
Products affected by CVE-2015-5038
  • Ibm » Connections » Version: 1.0.0.0
    cpe:2.3:a:ibm:connections:1.0.0.0
  • Ibm » Connections » Version: 1.0.1.0
    cpe:2.3:a:ibm:connections:1.0.1.0
  • Ibm » Connections » Version: 1.0.2.0
    cpe:2.3:a:ibm:connections:1.0.2.0
  • Ibm » Connections » Version: 2.0.0.0
    cpe:2.3:a:ibm:connections:2.0.0.0
  • Ibm » Connections » Version: 2.0.1.0
    cpe:2.3:a:ibm:connections:2.0.1.0
  • Ibm » Connections » Version: 2.0.1.1
    cpe:2.3:a:ibm:connections:2.0.1.1
  • Ibm » Connections » Version: 2.5.0.0
    cpe:2.3:a:ibm:connections:2.5.0.0
  • Ibm » Connections » Version: 2.5.0.1
    cpe:2.3:a:ibm:connections:2.5.0.1
  • Ibm » Connections » Version: 2.5.0.2
    cpe:2.3:a:ibm:connections:2.5.0.2
  • Ibm » Connections » Version: 2.5.0.3
    cpe:2.3:a:ibm:connections:2.5.0.3
  • Ibm » Connections » Version: 3.0.0.0
    cpe:2.3:a:ibm:connections:3.0.0.0
  • Ibm » Connections » Version: 3.0.1.0
    cpe:2.3:a:ibm:connections:3.0.1.0
  • Ibm » Connections » Version: 3.0.1.1
    cpe:2.3:a:ibm:connections:3.0.1.1
  • Ibm » Connections » Version: 4.0
    cpe:2.3:a:ibm:connections:4.0
  • Ibm » Connections » Version: 4.5
    cpe:2.3:a:ibm:connections:4.5
  • Ibm » Connections » Version: 5.0
    cpe:2.3:a:ibm:connections:5.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved