CVE-2015-0194

MEDIUM

IBM Sterling B2B Integrator and Sterling File Gateway - XML External Entity Injection

Title source: llm

Description

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

References (3)

Core 3

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21699482

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/73401

Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-01.ibm.com/support/docview.wss?uid=swg1IT06733

Scores

CVSS v3 6.5

EPSS 0.0141

EPSS Percentile 69.1%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-611

Status published

Products (4)

ibm/sterling_b2b_integrator 5.1

ibm/sterling_b2b_integrator 5.2

ibm/sterling_file_gateway 2.1

ibm/sterling_file_gateway 2.2

Published Aug 02, 2017

Tracked Since Feb 18, 2026