CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2023-38366 – IBM FileNet Content Manager directory traversal
https://notcve.org/view.php?id=CVE-2023-38366
01 Mar 2024 — IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 261115. IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0 y 5.5.11.0 podría permitir que un atacante remoto atraviese directorios en el sistema. Un atacante podría enviar una solicitud URL especialmente manipulada que c... • https://exchange.xforce.ibmcloud.com/vulnerabilities/261115 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-35905 – IBM FileNet Content Manager cross-site scripting
https://notcve.org/view.php?id=CVE-2023-35905
04 Oct 2023 — IBM FileNet Content Manager 5.5.8, 5.5.10, and 5.5.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 259384. IBM FileNet Content Manager 5.5.8, 5.5.10 y 5.5.11 es vulnerable a Cross-Site Scripting (XSS). Esta vulnerabilidad permite a los usuarios incrustar código JavaScript arbitrario en la interfaz de usuari... • https://exchange.xforce.ibmcloud.com/vulnerabilities/259384 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 1%CPEs: 3EXPL: 0CVE-2021-38965
https://notcve.org/view.php?id=CVE-2021-38965
17 Jan 2022 — IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 212346. IBM FileNet Content Manager versiones 5.5.4, 5.5.6 y 5.5.7, podría permitir a un atacante remoto autenticado ejecutar comandos arbitrarios en el sistema mediante el envío de una petición especialmente diseñada. IBM X-Force ID: 212346 • https://exchange.xforce.ibmcloud.com/vulnerabilities/212346 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4759
https://notcve.org/view.php?id=CVE-2020-4759
09 Nov 2020 — IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 188736. IBM FileNet Content Manager versiones 5.5.4 y 5.5.5, es potencialmente vulnerable a una Inyección CVS. Un atacante remoto podría ejecutar comandos arbitrarios en el sistema, causado por una comprobación inapropiada del contenido del archivo csv. • https://exchange.xforce.ibmcloud.com/vulnerabilities/188736 • CWE-1236: Improper Neutralization of Formula Elements in a CSV File •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2020-4447
https://notcve.org/view.php?id=CVE-2020-4447
23 Jul 2020 — IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 181227. IBM FileNet Content Manager versiones 5.5.3 y 5.5.4, es vulnerable a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario... • https://exchange.xforce.ibmcloud.com/vulnerabilities/181227 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.4EPSS: 0%CPEs: 2EXPL: 0CVE-2019-4572
https://notcve.org/view.php?id=CVE-2019-4572
14 Oct 2019 — IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM X-Force ID: 166798. Las versiones 5.5.2 y 5.5.3 de IBM FileNet Content Manager en configuraciones específicas, podría registrar las credenciales de usuario del servicio web en un archivo de registro al que podría acceder un administrador en la máquina local. ID de IBM X-Force: 166798. • https://exchange.xforce.ibmcloud.com/vulnerabilities/166798 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2018-1844
https://notcve.org/view.php?id=CVE-2018-1844
12 Oct 2018 — IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 150904. Las versiones 5.2.1 y 5.5.0 de IBM FileNet Content Manager son vulnerables a ataques de tipo XML External Entity Injection (XXE) al procesar datos XML. Un atacante remoto podría explotar esta vulnerabilidad para exponer información sensible o c... • https://exchange.xforce.ibmcloud.com/vulnerabilities/150904 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2018-1542
https://notcve.org/view.php?id=CVE-2018-1542
06 Jul 2018 — IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 142597. IBM FileNet Content Manager, IBM Content Foundation y IBM Case Foundation Administration Console for Content Platform Engine (ACCE) en v... • http://www.ibm.com/support/docview.wss?uid=swg22015943 • CWE-611: Improper Restriction of XML External Entity Reference •
CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0CVE-2018-1555
https://notcve.org/view.php?id=CVE-2018-1555
06 Jul 2018 — IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142892. Las versiones 5.2.1 y 5.5.0 de IBM FileNet Content Manager son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuari... • http://www.ibm.com/support/docview.wss?uid=swg22015943 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 4EXPL: 0CVE-2018-1556
https://notcve.org/view.php?id=CVE-2018-1556
06 Jul 2018 — IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 142893. Las versiones 5.2.1 y 5.5.0 de IBM FileNet Content Manager son vulnerables a Cross-Site Scripting (XSS). Esta vulnerabilidad permite que los usuarios embeban código JavaScript arbitrario en la interfaz de usuari... • http://www.ibm.com/support/docview.wss?uid=swg22015943 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •