CVEvulnerability
CVE-2015-0194
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2017-08-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-611
Description
XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.
Affected configurations
• ibm sterling b2b integrator 5.1
• ibm sterling b2b integrator 5.2
• ibm sterling file gateway 2.1
• ibm sterling file gateway 2.2
Related
Weakness · CWE (1)
- CWE-611 Improper Restriction of XML External Entity Reference weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21699482 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73401 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21699482 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/73401 Third Party Advisory, VDB Entry