CVE-2015-0923
5.0
CVSS v2.0 Base Score
77.78%
HIGH RiskEPSS (99th percentile)
NVD-CWE-Other
The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 before sp1 allows remote attackers to read arbitrary files via an external entity declaration in conjunction with an entity reference within an XML document named in the xslt parameter, related to an XML External Entity (XXE) issue.
Published: 2/14/2015
Modified: 5/6/2026
Vulnerability Summary
CVSS v2 Score
5
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Score (Exploitation Probability)
77.78%HIGH Exploitation Risk
99th percentile
This vulnerability has a 77.78% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.
CWE Classification
NVD-CWE-Other