Known vulnerabilities in IBM Content Foundation

Vendor: IBM Corporation
Software: IBM Content Foundation
Software CPE: cpe:2.3:a:ibm_corporation:ibm_content_foundation:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 5.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM Content Foundation IBM Content Foundation is affected by 3 known vulnerabilities: 3 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU13606 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1542		 CWE-611 Low
No
No
 5.2.1.7, 5.5.1 09.07.2018 SB2018070614
#VU13605 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1556		 CWE-79 Low
No
No
 5.2.1.7, 5.5.1 09.07.2018 SB2018070614
#VU13604 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-1555		 CWE-79 Low
No
No
 5.2.1.7, 5.5.1 06.07.2018 SB2018070614