VULNERABILITY INTELLIGENCE

CVE-2015-1961

CVSS score9 HIGH
EPSS probability2.41%
CISA KEVNot currently listed
Published2015-07-13
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.

Weakness classification

  • CWE-284: Improper Access Control

Primary references