CVE-2015-0194 in Sterling B2B Integrator

Summary

XML External Entity (XXE) vulnerability in IBM Sterling B2B Integrator 5.1 and 5.2 and IBM Sterling File Gateway 2.1 and 2.2 allows remote attackers to read arbitrary files via a crafted XML data.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 11/18/2014
• Disclosure: 08/02/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-104769
• CPE: ready
• CWE: CWE-611 (Confirmed)
• CVSS: 5.4
• EPSS: 0.00194
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-0194
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-0194
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-0194/