VULNERABILITY INTELLIGENCE

CVE-2015-1885

CVSS score9.3 HIGH
EPSS probability3.41%
CISA KEVNot currently listed
Published2015-04-27
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.

Primary references