NVD

Id
24156  
Name
CVE-2015-1961  
Description
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-07-13  
Modified Date
2016-11-29  
Seq
2015-1961  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128112 24156 CVE-2015-1961 JR53356  View
128113 24156 CVE-2015-1961 http://www-01.ibm.com/support/docview.wss?uid=swg21959052  View
128114 24156 CVE-2015-1961 75536  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
8238 JVNDB-2015-003558 IBM Business Process Manager の REST API におけるアクセス制限を回避される脆弱性 IBM Business Process Manager (BPM) の REST API には、アクセス制限を回避される、およびサーバー上で任意の JavaScript コードを実行される脆弱性が存在します。 CVE-2015-1961 79186 CVE-2015-1961 24156 9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003558.html 2015-06-29 2015-07-14 View