CVE-2015-0132: ibm rational_doors_next_generation Resource Management Errors
Vulnerability summary
CVE-2015-0132 is a high (CVSS 7.8) Resource Management Errors vulnerability in ibm rational_doors_next_generation. EPSS estimates a 1.33% chance of exploitation in the next 30 days, higher than 70.7% of scored vulnerabilities.
Timeline
- 18-03-2015PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
The XML parser in IBM Rational DOORS Next Generation 4.x before 4.0.7 iFix3 and 5.x before 5.0.2 and Rational Requirements Composer 2.x and 3.x before 3.0.1.6 iFix5 and 4.x before 4.0.7 iFix3 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.33%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
0.00 pp
From 1.33% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- rational_doors_next_generation4.0.0 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.0.6 | 4.0.7 | 5.0 | 5.0.1
- rational_requirements_composer2.0 | 2.0.0.1 | 2.0.0.2 | 2.0.0.3 | 2.0.0.4 | 3.0 | 3.0.1 | 3.0.1.1 | 3.0.1.2 | 3.0.1.3 | 3.0.1.4 | 3.0.1.5 | 3.0.1.6 | 4.0 | 4.0.0 | 4.0.0.1 | 4.0.0.2 | 4.0.1 | 4.0.2 | 4.0.3 | 4.0.4 | 4.0.5 | 4.0.6 | 4.0.7
1 vendor · 2 products