CVE

Id
70382  
CVE No.
CVE-2014-3087  
Status
Candidate  
Description
callService.do in IBM Business Process Manager (BPM) 7.5 through 8.5.5 and WebSphere Lombardi Edition 7.2 through 7.2.0.5 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Phase
Assigned (20140429)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
669692 70382 CVE-2014-3087 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg21679726  View
669693 70382 CVE-2014-3087 AIXAPAR:JR50616  View
669694 70382 CVE-2014-3087 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1JR50616  View
669695 70382 CVE-2014-3087 BID:69264  View
669696 70382 CVE-2014-3087 URL:http://www.securityfocus.com/bid/69264  View
669697 70382 CVE-2014-3087 SECUNIA:60752  View
669698 70382 CVE-2014-3087 URL:http://secunia.com/advisories/60752  View
669699 70382 CVE-2014-3087 SECUNIA:60755  View
669700 70382 CVE-2014-3087 URL:http://secunia.com/advisories/60755  View
669701 70382 CVE-2014-3087 SECUNIA:60757  View
669702 70382 CVE-2014-3087 URL:http://secunia.com/advisories/60757  View
669703 70382 CVE-2014-3087 XF:ibm-websphere-cve20143087-info-disc(94112)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
15162 JVNDB-2014-004037 複数の OS 上で稼動する IBM DB2 の SQL エンジンにおけるサービス運用妨害 (DoS) の脆弱性 Linux、UNIX、および Windows 上で稼動する IBM DB2 の SQL エンジンには、サービス運用妨害 (デーモンクラッシュ) の状態にされる脆弱性が存在します。 CVE-2014-3095 70382 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004037.html  View