VULNERABILITY INTELLIGENCE
CVE-2015-4947
CVSS score9 HIGH
EPSS probability7.92%
CISA KEVNot currently listed
Published2015-09-15
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Description
Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code via unspecified vectors.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- psirt@us.ibm.com — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry