Vulnerabilities > CVE-2015-0194 - XXE vulnerability in IBM Sterling B2B Integrator and Sterling File Gateway

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
ibm
CWE-611
NVD
Published: 2017-08-02
Updated: 2024-11-21

Summary

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

Vulnerable Configurations

Part Description Count
Application
Ibm
4

Common Weakness Enumeration (CWE)

References