CVE-2018-1556

IBM FileNet Content Manager (and IBM Content Foundation) versions 5.2.1 and 5.5.0 are affected by a cross-site scripting (XSS) vulnerability in the Administration Console for Content Platform Engine (ACCE) that could allow a user’s browser to execute arbitrary JavaScript in the Web UI, potentiall...

CVE-2018-1542

The CVE-2018-1542 issue affects IBM FileNet Content Manager and IBM Content Foundation, specifically the Administration Console for Content Platform Engine (ACCE), version 5.2.1 and 5.5.0. ACCE processes XML data and is vulnerable to XML External Entity (XXE) injection, exposing sensitive informa...

CVE-2018-1555

IBM FileNet Content Manager (and IBM Content Foundation) versions 5.2.1 and 5.5.0 are affected by a cross-site scripting vulnerability in the Administration Console for Content Platform Engine (ACCE) / Web UI. The issue allows an attacker to inject arbitrary JavaScript, potentially leading to cre...