VULNERABILITY INTELLIGENCE

CVE-2015-5014

CVSS score9.3 HIGH
EPSS probability1.46%
CISA KEVNot currently listed
Published2015-10-26
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing an executable file during a client upload operation.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references