Lucene search

[email protected]CVE-2015-0194

HistoryAug 02, 2017 - 7:29 p.m.

CVE-2015-0194

2017-08-0219:29:00

CWE-611

[email protected]

web.nvd.nist.gov

ibm

sterling

b2b integrator

file gateway

xxe

vulnerability

xml

security

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.1%

JSON

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

CPENameOperatorVersion
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.2
ibm:sterling_b2b_integratoribm sterling b2b integratoreq5.1
ibm:sterling_file_gatewayibm sterling file gatewayeq2.1
ibm:sterling_file_gatewayibm sterling file gatewayeq2.2

CPE	Name	Operator	Version
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.2
ibm:sterling_b2b_integrator	ibm sterling b2b integrator	eq	5.1
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.1
ibm:sterling_file_gateway	ibm sterling file gateway	eq	2.2

References

www-01.ibm.com/support/docview.wss?uid=swg1IT06733

www-01.ibm.com/support/docview.wss?uid=swg21699482

www.securityfocus.com/bid/73401

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

39.1%

JSON

Related for CVE-2015-0194

ibm1 prion1 cvelist1