4
CVE-2015-7455
- EPSS 0.68%
- Veröffentlicht 29.02.2016 11:59:01
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Erkennungen
IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Websphere Portal Version 7.0.0.0
Ibm ≫ Websphere Portal Version 7.0.0.1
Ibm ≫ Websphere Portal Version 7.0.0.2
Ibm ≫ Websphere Portal Version 8.0.0.0
Ibm ≫ Websphere Portal Version 8.0.0.1
Ibm ≫ Websphere Portal Version 8.5.0.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.68% | 0.475 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 3.1 | 1.6 | 1.4 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
|
| NIST | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:N/I:P/A:N
|
http://www.ibm.com/support/docview.wss?uid=swg21975358
http://www-01.ibm.com/support/docview.wss?uid=swg1PI51234