IBM Content Foundation vulnerabilities

3 CVEs affecting IBM Content Foundation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1556, published 2018-07-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1542, published 2018-07-06. High severity, CVSS 7.1. EPSS: 2.4% chance of exploitation in the next 30 days. IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity…
CVE-2018-1556, published 2018-07-06. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2018-1555, published 2018-07-06. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…