What is CVE-2015-7455?

CVE-2015-7455 is a low-severity vulnerability in Ibm Websphere Portal, classified under CWE-264. CVSS score: 3.1/10. Published 2016-02-29.

How severe is CVE-2015-7455?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Ibm Websphere Portal

CVE-2015-7455

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.

EPSS: 0.007 (48.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Ibm Websphere_portal — versions 7.0.0.0, 7.0.0.1, 7.0.0.2
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@us.ibm.com (x_refsource_CONFIRM)
psirt@us.ibm.com (vendor-advisory, x_refsource_AIXAPAR)

Frequently asked questions

What is CVE-2015-7455?: CVE-2015-7455 is a low-severity vulnerability in Ibm Websphere Portal, classified under CWE-264. CVSS score: 3.1/10. Published 2016-02-29.
How severe is CVE-2015-7455?: Low severity. CVSS v3 base score is 3.1 out of 10.