Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-2518


Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.


Published

2010-06-30T18:30:01.910

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
    NVD-CWE-noinfo

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm p8_content_engine 4.5.1 Yes
Application ibm p8_content_engine 4.5.1.1 Yes
Application ibm p8_content_engine 4.5.1.2 Yes
Application ibm filenet_p8_business_process_manager * No
Application ibm filenet_p8_content_manager * No
Application ibm filenet_p8_business_process_manager * No
Application ibm filenet_p8_content_manager * No
Application ibm p8_content_search_engine 4.5.0 Yes
Application ibm p8_content_search_engine 4.5.0.1 Yes
Application ibm p8_content_search_engine 4.5.0.2 Yes
Application ibm p8_content_search_engine 4.5.1 Yes

References