CVE-2015-0923

no score yetEPSS 22%

ektron ektron content management system: no CVSS score yet. EPSS 22% chance of exploitation in the next 30 days.

The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named in the xslt parameter, related to an XML External Entity (XXE) issue.

EPSS: 22% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2015-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ektron:ektron_content_management_system

References

http://www.kb.cert.org/vuls/id/377644
http://www.kb.cert.org/vuls/id/377644

Check your stack JSON