Unscored CVE-2015-7461 EUVD-2015-7385GHSA-vg34-vmvf-qg4r

XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated us…

Published Mar 20, 2018 · Updated Aug 6, 2024 · Assigned by ibm

Description

XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357.

References

ibm-connections-cve20157461-dos(108357) vdb-entry
http://www-01.ibm.com/support/docview.wss?uid=swg21980518