Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05430
HistoryJan 18, 2022 - 12:00 a.m.

IBM FileNet Content Manager Command Injection Vulnerability

2022-01-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
ibm filenet content manager
command injection
vulnerability
network system
product
user input
arbitrary commands
specially crafted requests

EPSS

0.002

Percentile

56.6%

IBM FileNet Content Manager is a content management solution for the FileNet P8 platform from IBM of America. The solution combines document management with ready-to-use workflow tools to manage images, videos, Web content, compliance documents, etc. IBM FileNet Content Manager in versions 5.5.4, 5.5.6 and 5.5.7 is vulnerable to command injection, which stems from the failure of the network system or product to properly filter the user’s input during the execution of a constructed command. special characters, commands, etc. An authenticated remote attacker could use this vulnerability to execute arbitrary commands on the system by sending specially crafted requests.

EPSS

0.002

Percentile

56.6%

Related for CNVD-2022-05430