5.4
CVE-2025-15395
- EPSS 0.18%
- Veröffentlicht 02.02.2026 16:16:18
- Zuletzt bearbeitet 11.02.2026 20:34:53
- Erkennungen
IBM Jazz Foundation access control violation
IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 through 7.1.0 iFix005 is vulnerable to access control violations that allows the users to view or access/perform actions beyond their expected capability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Jazz Foundation Version 7.0.3 Update -
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix001
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix002
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix003
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix004
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix005
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix006
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix007
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix008
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix009
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix010
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix011
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix012
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix013
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix014
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix015
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix016
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix017
Ibm ≫ Jazz Foundation Version 7.0.3 Update ifix018
Ibm ≫ Jazz Foundation Version 7.1.0 Update -
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix001
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix002
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix003
Ibm ≫ Jazz Foundation Version 7.1.0 Update ifix004
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.18% | 0.072 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
|
| IBM | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
|
CWE-863 Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
https://www.ibm.com/support/pages/node/7258304