IBM Content Collector vulnerabilities

2 CVEs affecting IBM Content Collector, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0146, published 2015-03-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-4757, published 2014-08-12. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. The Outlook Extension in IBM Content Collector 4.0.0.x before 4.0.0.0-ICC-OE-IF004 allows local users to bypass the intended Reviewer privilege requirement and read e-mail messages from an arbitrary…
CVE-2015-0146, published 2015-03-18. Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Content Collector for Email 3.0 before 3.0.0.6-IBM-ICC-Server-IF001 and 4.0 before 4.0.0.3-IBM-ICC-Server-IF001 does not properly handle an unspecified query operator during searches of IBM…