IBM Filenet p8 Content Manager vulnerabilities

2 CVEs affecting IBM Filenet p8 Content Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-1046, published 2011-02-21.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-1046, published 2011-02-21. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. IBM FileNet P8 Content Engine (aka P8CE) 4.0.1 through 5.0.0, as used in FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), does not require the PRIVILEGED_WRITE access…
• CVE-2011-1045, published 2011-02-21. Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Rendition Engine (aka P8RE) 4.0.1 through 4.5.1 in IBM FileNet P8 Content Manager (CM) allows remote attackers to gain privileges via unknown vectors.