Medium severity6.5NVD Advisory· Published Mar 20, 2018· Updated Jun 17, 2026
CVE-2015-7461
CVE-2015-7461
Description
XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote authenticated users to cause a denial of service (memory consumption) via crafted XML data. IBM X-Force ID: 108357.
Affected products
5cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*range: <=3.0.1.1
- cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=5.0 CR4, 3.0.1.1 and earlier, 4.0, 4.5
Patches
Vulnerability mechanics
References
2- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/108357nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.