Vulnerability in IBM Filenet P8 Business Process Manager
CVE-2010-2518
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.016 (75.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 75th percentile — 75.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.016 · newest: 0.016 · change: 0.000
Affected products
- IBM Filenet P8 Business Process Manager
- IBM Filenet P8 Content Manager
- IBM P8 Content Engine — versions 4.5.1.2, 4.5.1.1, 4.5.1
- IBM P8 Content Search Engine — versions 4.5.0.1, 4.5.0.2, 4.5.1
Weakness classification (CWE)
References
- www.osvdb.org/65804 (vdb-entry)
- secunia.com/advisories/40413 (third-party-advisory, Vendor Advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/59792 (vdb-entry)
- www.securityfocus.com/bid/41177 (vdb-entry)
- www.vupen.com/english/advisories/2010/1616 (vdb-entry, Vendor Advisory)
- www-01.ibm.com/support/docview.wss (Vendor Advisory)