CVE-2010-2518
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM),…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 1.61% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- ibm/p8 content engine · ibm/p8 content search engine
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/40413Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21438487Vendor Advisory
- http://www.osvdb.org/65804
- http://www.securityfocus.com/bid/41177
- http://www.vupen.com/english/advisories/2010/1616Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59792
- http://secunia.com/advisories/40413Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21438487Vendor Advisory
- http://www.osvdb.org/65804
- http://www.securityfocus.com/bid/41177
- http://www.vupen.com/english/advisories/2010/1616Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59792
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.