IBM Filenet Content Manager vulnerabilities

20 CVEs affecting IBM Filenet Content Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-47716, published 2024-03-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-1542, published 2018-07-06. High severity, CVSS 7.1. EPSS: 2.4% chance of exploitation in the next 30 days. IBM FileNet Content Manager, IBM Content Foundation, and IBM Case Foundation Administration Console for Content Platform Engine (ACCE) 5.2.1 and 5.5.0 are vulnerable to a XML External Entity…
CVE-2020-4759, published 2020-11-09. High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.5.4 and 5.5.5 is potentially vulnerable to CVS Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file…
CVE-2018-1844, published 2018-10-12. High severity, CVSS 7.1. EPSS: 1.9% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose…
CVE-2021-38965, published 2022-01-17. High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.5.4, 5.5.6, and 5.5.7 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID:…
CVE-2010-3318, published 2010-09-13. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 transmits passwords in cleartext, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2013-6746, published 2014-01-22. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content…
CVE-2010-3320, published 2010-09-13. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. Open redirect vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified…
CVE-2013-5449, published 2013-12-04. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and…
CVE-2010-3319, published 2010-09-13. Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days. IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 places a session token in the URI, which might allow remote attackers to obtain sensitive information by reading a Referer log file.
CVE-2010-3317, published 2010-09-13. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM Records Manager (RM) 4.5.x before 4.5.1.1-IER-FP001 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Latest

CVE-2023-47716, published 2024-03-01. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. IBM CP4BA - Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a user to gain the privileges of another user under unusual circumstances. IBM X-Force ID: 271656.
CVE-2023-38366, published 2024-03-01. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. IBM Filenet Content Manager Component 5.5.8.0, 5.5.10.0, and 5.5.11.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request…
CVE-2023-35905, published 2023-10-04. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.5.8, 5.5.10, and 5.5.11 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the…
CVE-2020-4447, published 2020-07-23. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.5.3 and 5.5.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2019-4572, published 2019-10-14. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.5.2 and 5.5.3 in specific configurations, could log the web service user credentials into a log file that could be accessed by an administrator on the local machine. IBM…
CVE-2018-1556, published 2018-07-06. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…
CVE-2018-1555, published 2018-07-06. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. IBM FileNet Content Manager 5.2.1 and 5.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended…