IBM Filenet Workplace Xt vulnerabilities

2 CVEs affecting IBM Filenet Workplace Xt, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-8921, published 2017-02-01.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-8921, published 2017-02-01. High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days. IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server.
• CVE-2016-5981, published 2016-11-25. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM FileNet Workplace XT through 1.1.5.2-WPXT-LA011 and FileNet Workplace (Application Engine) through 4.0.2.14-P8AE-IF001, when RegExpSecurityFilter and…