{"api_version":"1","generated_at":"2026-07-23T14:50:42+00:00","cve":"CVE-2010-2518","urls":{"html":"https://cve.report/CVE-2010-2518","api":"https://cve.report/api/cve/CVE-2010-2518.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2010-2518","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2010-2518"},"summary":{"title":"CVE-2010-2518","description":"Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information.","state":"PUBLISHED","assigner":"mitre","published_at":"2010-06-30 18:30:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487","name":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM A security vulnerability with the IBM FileNet P8 Content Engine and Content Search Engine has been identified and addressed - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/65804","name":"http://www.osvdb.org/65804","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/41177","name":"http://www.securityfocus.com/bid/41177","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Malformed Request","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/40413","name":"http://secunia.com/advisories/40413","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"IBM FileNet Unspecified Security Bypass Vulnerability - Advisories - Community","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2010/1616","name":"http://www.vupen.com/english/advisories/2010/1616","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59792","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59792","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-2518","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2518","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2010","cve_id":"2518","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"filenet_p8_business_process_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2518","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"filenet_p8_content_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2518","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"p8_content_engine","cpe6":"4.5.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2518","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"p8_content_engine","cpe6":"4.5.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2010","cve_id":"2518","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"p8_content_engine","cpe6":"4.5.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T02:39:37.070Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"65804","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/65804"},{"name":"40413","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/40413"},{"name":"filenet-cse-security-bypass(59792)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"},{"name":"41177","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/41177"},{"name":"ADV-2010-1616","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2010/1616"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2010-06-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-16T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"65804","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/65804"},{"name":"40413","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/40413"},{"name":"filenet-cse-security-bypass(59792)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"},{"name":"41177","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/41177"},{"name":"ADV-2010-1616","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2010/1616"},{"tags":["x_refsource_CONFIRM"],"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2010-2518","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"65804","refsource":"OSVDB","url":"http://www.osvdb.org/65804"},{"name":"40413","refsource":"SECUNIA","url":"http://secunia.com/advisories/40413"},{"name":"filenet-cse-security-bypass(59792)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59792"},{"name":"41177","refsource":"BID","url":"http://www.securityfocus.com/bid/41177"},{"name":"ADV-2010-1616","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2010/1616"},{"name":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487","refsource":"CONFIRM","url":"http://www-01.ibm.com/support/docview.wss?uid=swg21438487"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2010-2518","datePublished":"2010-06-30T18:00:00.000Z","dateReserved":"2010-06-30T00:00:00.000Z","dateUpdated":"2024-08-07T02:39:37.070Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2010-06-30 18:30:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_engine:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E6CA98C3-D287-4D9C-B2EF-6FE4DF526DA4"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_engine:4.5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"97ABEE15-7B9F-4269-8F52-02E8C4B06521"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_engine:4.5.1.2:*:*:*:*:*:*:*","matchCriteriaId":"C9C3B026-E991-4EBB-812F-0DBB2A8526C9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E13A33FB-D20C-4010-8CE8-249745210F61"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"63637F57-35D7-4B16-8D18-AC958475CD49"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:filenet_p8_business_process_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"E13A33FB-D20C-4010-8CE8-249745210F61"},{"vulnerable":false,"criteria":"cpe:2.3:a:ibm:filenet_p8_content_manager:*:*:*:*:*:*:*:*","matchCriteriaId":"63637F57-35D7-4B16-8D18-AC958475CD49"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_search_engine:4.5.0:*:*:*:*:*:*:*","matchCriteriaId":"DE2CDBCE-8668-4E74-AC85-7F633805175C"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"896B931C-A8D0-4664-99D9-10408CFCF3AD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_search_engine:4.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"243E0A51-D47F-4344-84F7-D2771617D0C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:p8_content_search_engine:4.5.1:*:*:*:*:*:*:*","matchCriteriaId":"701BD744-1958-47A1-9902-72E5918D6BFB"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2010","CveId":"2518","Ordinal":"1","Title":"CVE-2010-2518","CVE":"CVE-2010-2518","Year":"2010"},"notes":[{"CveYear":"2010","CveId":"2518","Ordinal":"1","NoteData":"Unspecified vulnerability in the P8 Content Engine (P8CE) 4.5.1 before FP3 and the P8 Content Search Engine (P8CSE) before 4.5.0 FP3 and 4.5.1 before FP1, as used in IBM FileNet P8 Content Manager (CM) and FileNet P8 Business Process Manager (BPM), allows remote attackers to gain privileges via unknown vectors.  NOTE: some of these details are obtained from third party information.","Type":"Description","Title":"CVE-2010-2518"},{"CveYear":"2010","CveId":"2518","Ordinal":"2","NoteData":"2010-06-30","Type":"Other","Title":"Published"},{"CveYear":"2010","CveId":"2518","Ordinal":"3","NoteData":"2017-08-16","Type":"Other","Title":"Modified"}]}}}