CVE-2015-4997 : IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intende

IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access restrictions via a crafted request.

Published 2015-10-29 11:59:06

Updated 2025-04-12 10:46:41

Source IBM Corporation

View at NVD, CVE.org

Products affected by CVE-2015-4997

IBM » Websphere Portal » Version: 8.5.0.0
cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.21%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 40 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www-01.ibm.com/support/docview.wss?uid=swg1PI47694

IBM notice: The page you requested cannot be displayed
http://www-01.ibm.com/support/docview.wss?uid=swg21968474

IBM Security Bulletin: Fix Available for Security Vulnerability in IBM WebSphere Portal (CVE-2015-4997)
Patch;Vendor Advisory
http://www.securitytracker.com/id/1033982

IBM WebSphere Portal Access Control Bypass Flaw Lets Remote Users Access the Target System - SecurityTracker

Jump to