ByteOS Network

Vulnerability Details :

CVE-2015-7472

Assigner-ibm

Assigner Org ID-9a959283-ebb5-44b6-b705-dcc2bbced522

Published At-15 Feb, 2016 | 02:00

Updated At-06 Aug, 2024 | 07:51

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers to conduct LDAP injection attacks, and consequently read or write to repository data, via unspecified vectors.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:ibm

Assigner Org ID:9a959283-ebb5-44b6-b705-dcc2bbced522

Published At:15 Feb, 2016 | 02:00

Updated At:06 Aug, 2024 | 07:51

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securitytracker.com/id/1035324	vdb-entry x_refsource_SECTRACK
http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426	vendor-advisory x_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg21972736	x_refsource_CONFIRM

Hyperlink: http://www.securitytracker.com/id/1035324

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426

Resource:

vendor-advisory

x_refsource_AIXAPAR

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21972736

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securitytracker.com/id/1035324	vdb-entry x_refsource_SECTRACK x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426	vendor-advisory x_refsource_AIXAPAR x_transferred
http://www-01.ibm.com/support/docview.wss?uid=swg21972736	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securitytracker.com/id/1035324

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426

Resource:

vendor-advisory

x_refsource_AIXAPAR

x_transferred

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21972736

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@us.ibm.com

Published At:15 Feb, 2016 | 02:59

Updated At:06 May, 2026 | 22:30

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.2	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N

Type: Primary

Version: 3.0

Base score: 7.2

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Type: Primary

Version: 2.0

Base score: 6.4

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:N

CPE Matches

IBM Corporation

>>websphere_portal>>6.1.0.0

cpe:2.3:a:ibm:websphere_portal:6.1.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.1

cpe:2.3:a:ibm:websphere_portal:6.1.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.2

cpe:2.3:a:ibm:websphere_portal:6.1.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.3

cpe:2.3:a:ibm:websphere_portal:6.1.0.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.4

cpe:2.3:a:ibm:websphere_portal:6.1.0.4:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.5

cpe:2.3:a:ibm:websphere_portal:6.1.0.5:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.0.6

cpe:2.3:a:ibm:websphere_portal:6.1.0.6:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.5.0

cpe:2.3:a:ibm:websphere_portal:6.1.5.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.5.1

cpe:2.3:a:ibm:websphere_portal:6.1.5.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.5.2

cpe:2.3:a:ibm:websphere_portal:6.1.5.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>6.1.5.3

cpe:2.3:a:ibm:websphere_portal:6.1.5.3:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>7.0.0.0

cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>7.0.0.1

cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>7.0.0.2

cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>8.0.0.0

cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>8.0.0.1

cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*

IBM Corporation

>>websphere_portal>>8.5.0.0

cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

Evaluator Description

CWE-90: Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') - https://cwe.mitre.org/data/definitions/90.html

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21972736	psirt@us.ibm.com	Vendor Advisory
http://www.securitytracker.com/id/1035324	psirt@us.ibm.com	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www-01.ibm.com/support/docview.wss?uid=swg21972736	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securitytracker.com/id/1035324	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21972736

Source: psirt@us.ibm.com

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1035324

Source: psirt@us.ibm.com

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg1PI53426

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www-01.ibm.com/support/docview.wss?uid=swg21972736

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: http://www.securitytracker.com/id/1035324

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

52Records found

CVE-2015-5041

Matching Score-8

Assigner-IBM Corporation

View Details

Matching Score-8

Assigner-IBM Corporation

CVSS Score-9.1||CRITICAL

EPSS-3.90% / 89.18%

7 Day CHG~0.00%

Published-06 Jun, 2016 | 17:00

Updated-06 May, 2026 | 22:30

The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 before SR3 FP30 allows remote attackers to obtain sensitive information or inject data by invoking non-public interface methods.

Vendor-n/a Red Hat, Inc.IBM Corporation SUSE

Product-satellite linux_enterprise_software_development_kit suse_linux_enterprise_server websphere_application_server linux_enterprise_server java_sdk n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2015-4987

Matching Score-8

Assigner-IBM Corporation

View Details

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.5||MEDIUM

EPSS-1.13% / 63.13%

7 Day CHG~0.00%

Published-27 Mar, 2018 | 17:00

Updated-06 Aug, 2024 | 06:32

The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896.

Vendor-n/a IBM Corporation

Product-tealeaf_customer_experience n/a

CWE ID-CWE-287

Improper Authentication

CVE-2015-7472

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs