CVE-2015-7463

Published: Mar 15, 2018Modified: Nov 21, 2024

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete process and task data by leveraging incorrect authorization checks. IBM X-Force ID: 108393.

Affected (15)

Products: Ibm: Business Process Manager

Ibm

1 product

Business Process Manager

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Ibm Business Process Manager	Version 7.5.0.0
Ibm Business Process Manager	Version 7.5.0.1
Ibm Business Process Manager	Version 7.5.1.0
Ibm Business Process Manager	Version 7.5.1.1
Ibm Business Process Manager	Version 7.5.1.2
Ibm Business Process Manager	Version 8.0.0.0
Ibm Business Process Manager	Version 8.0.1.0
Ibm Business Process Manager	Version 8.0.1.1
Ibm Business Process Manager	Version 8.0.1.2
Ibm Business Process Manager	Version 8.0.1.3
Ibm Business Process Manager	Version 8.5.0.0
Ibm Business Process Manager	Version 8.5.0.1
Ibm Business Process Manager	Version 8.5.0.2
Ibm Business Process Manager	Version 8.5.5.0
Ibm Business Process Manager	Version 8.5.6.0