CVE-2015-0110

Published: Sep 15, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated users to bypass intended access restrictions on internal service types via vectors involving the executeServiceByName URL.

Affected (19)

Products: Ibm: Business Process Manager, Websphere Application Server

Ibm

2 products

Business Process Manager

Websphere Application Server

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Process Manager	Version 7.5.0.0
Ibm Business Process Manager	Version 7.5.0.1
Ibm Business Process Manager	Version 7.5.1.0
Ibm Business Process Manager	Version 7.5.1.1
Ibm Business Process Manager	Version 7.5.1.2
Ibm Business Process Manager	Version 8.0.0.0
Ibm Business Process Manager	Version 8.0.1.0
Ibm Business Process Manager	Version 8.0.1.1
Ibm Business Process Manager	Version 8.0.1.2
Ibm Business Process Manager	Version 8.0.1.3
Ibm Business Process Manager	Version 8.5.0.0
Ibm Business Process Manager	Version 8.5.0.1
Ibm Business Process Manager	Version 8.5.5.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Websphere Application Server	Version 7.2.0.0
Ibm Websphere Application Server	Version 7.2.0.1
Ibm Websphere Application Server	Version 7.2.0.2
Ibm Websphere Application Server	Version 7.2.0.3
Ibm Websphere Application Server	Version 7.2.0.4
Ibm Websphere Application Server	Version 7.2.0.5