cbcvebase.
CVE-2015-7490
published 2016-03-03

CVE-2015-7490: IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to…

PriorityP413low3.1CVSS 3.0
AVNACHPRLUINSUCLINAN
EPSS
1.14%
62.8th percentile
IBM InfoSphere Information Server 8.5 through FP3, 8.7 through FP2, 9.1 through 9.1.2.0, 11.3 through 11.3.1.2, and 11.5 allows remote authenticated users to bypass intended access restrictions via a modified cookie.

Affected

13 ranges
VendorProductVersion rangeFixed in
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——
ibminfosphere_information_server——

CVSS provenance

nvdv3.03.1LOWCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.03.5LOWAV:N/AC:M/Au:S/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.