CVEvulnerability
CVE-2013-5452
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2013-12-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected configurations
• ibm filenet business process framework 4.1.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660343 Vendor Advisory
- http://www-304.ibm.com/support/docview.wss?uid=swg21963014 www-304.ibm.com
- http://www.securitytracker.com/id/1033734 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88192 exchange.xforce.ibmcloud.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1PJ40949 www-01.ibm.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21660343 Vendor Advisory
- http://www-304.ibm.com/support/docview.wss?uid=swg21963014 www-304.ibm.com
- http://www.securitytracker.com/id/1033734 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/88192 exchange.xforce.ibmcloud.com