Vulnerability Details : CVE-2010-2518
Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors. NOTE: some of these details are obtained from third party information.
Exploit prediction scoring system (EPSS) score for CVE-2010-2518
Probability of exploitation activity in the next 30 days: 0.98%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 81 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2010-2518
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2010-2518
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2010-2518
-
http://www.vupen.com/english/advisories/2010/1616
Webmail | OVH- OVHVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/59792
IBM FileNet Content Search Engine security bypass CVE-2010-2518 Vulnerability Report
-
http://www.securityfocus.com/bid/41177
IBM FileNet Security Bypass Vulnerability
-
http://www-01.ibm.com/support/docview.wss?uid=swg21438487
A security vulnerability with the IBM FileNet P8 Content Engine and Content Search Engine has been identified and addressedVendor Advisory
Products affected by CVE-2010-2518
- cpe:2.3:a:ibm:p8_content_engine:4.5.1:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_engine:4.5.1.1:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_engine:4.5.1.2:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.2:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.1:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_search_engine:4.5.1:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager
- cpe:2.3:a:ibm:p8_content_search_engine:4.5.0:*:*:*:*:*:*:*When used together with: IBM » Filenet P8 Business Process ManagerWhen used together with: IBM » Filenet P8 Content Manager