CVE-2015-4963

EPSS 3.3%
Veröffentlicht 08.11.2015 22:59:12
Zuletzt bearbeitet 06.05.2026 22:30:45
Erkennungen
Login

IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

NVD 26 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Security Access Manager For Web Version 7.0

Ibm ≫ Security Access Manager For Web Version 7.0.0.1

Ibm ≫ Security Access Manager For Web Version 7.0.0.2

Ibm ≫ Security Access Manager For Web Version 7.0.0.3

Ibm ≫ Security Access Manager For Web Version 7.0.0.4

Ibm ≫ Security Access Manager For Web Version 7.0.0.5

Ibm ≫ Security Access Manager For Web Version 7.0.0.6

Ibm ≫ Security Access Manager For Web Version 7.0.0.7

Ibm ≫ Security Access Manager For Web Version 7.0.0.8

Ibm ≫ Security Access Manager For Web Version 7.0.0.9

Ibm ≫ Security Access Manager For Web Version 7.0.0.10

Ibm ≫ Security Access Manager For Web Version 7.0.0.11

Ibm ≫ Security Access Manager For Web Version 7.0.0.12

Ibm ≫ Security Access Manager For Web Version 7.0.0.13

Ibm ≫ Security Access Manager For Web Version 7.0.0.14

Ibm ≫ Security Access Manager For Web Version 7.0.0.15

Ibm ≫ Security Access Manager For Web Version 8.0

Ibm ≫ Security Access Manager For Web Version 8.0.0.2

Ibm ≫ Security Access Manager For Web Version 8.0.0.3

Ibm ≫ Security Access Manager For Web Version 8.0.0.4

Ibm ≫ Security Access Manager For Web Version 8.0.0.5

Ibm ≫ Security Access Manager For Web Version 8.0.0.22

Ibm ≫ Security Access Manager For Web Version 8.0.0.31

Ibm ≫ Security Access Manager For Web Version 8.0.1.0

Ibm ≫ Security Access Manager For Web Version 8.0.1.1

Ibm ≫ Security Access Manager For Web Version 8.0.1.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.3%	0.869

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www-01.ibm.com/support/docview.wss?uid=swg1IV71196

http://www-01.ibm.com/support/docview.wss?uid=swg21964828

Vendor Advisory

http://www.securitytracker.com/id/1034103

https://nvd.nist.gov/vuln/detail/CVE-2015-4963

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-4963

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-4963

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2015-4963