VulnerabilityModified
CVE-2015-0194
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.
MEDIUM 6.5EPSS 1.41%
Does this matter?
Lower severity and a low EPSS score (1.41%). Track it; it rarely justifies an emergency change on its own.
Description
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.
- CVSS 3.0
- 6.5 MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 1.41% probability · 71th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-611
- Affected
- ibm/sterling b2b integrator · ibm/sterling file gateway
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21699482Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73401Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21699482Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73401Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.