NVD

Id
40742  
Name
CVE-2013-5452  
Description
IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2013-12-19  
Modified Date
2016-12-07  
Seq
2013-5452  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206145 40742 CVE-2013-5452 PJ40949  View
206146 40742 CVE-2013-5452 http://www-01.ibm.com/support/docview.wss?uid=swg21660343  View
206147 40742 CVE-2013-5452 http://www-304.ibm.com/support/docview.wss?uid=swg21963014  View
206148 40742 CVE-2013-5452 1033734  View
206149 40742 CVE-2013-5452 ibm-filenetbpf-cve20135452-xxe(88192)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24061 JVNDB-2013-005636 IBM FileNet Business Process Framework における任意のファイルを読まれる脆弱性 IBM FileNet Business Process Framework には、任意のファイルを読まれる、またはイントラネットサーバに TCP リクエストを送信される脆弱性が存在します。 CVE-2013-5452 65394 CVE-2013-5452 40742 3.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005636.html 2013-12-19 2013-12-24 View