IBM Content Manager vulnerabilities

2 CVEs affecting IBM Content Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1502, published 2018-05-01.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-4000, published 2015-05-21. Low severity, CVSS 3.7. EPSS: 99.9% chance of exploitation in the next 30 days. The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to…
• CVE-2018-1502, published 2018-05-01. Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days. IBM Content Manager Enterprise Edition Resource Manager 8.4.3 and 9.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus…