Vulnerability in Ibm Websphere_portal
CVE-2015-7472
IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF10 allows remote attackers to conduct LDAP injection attacks, and consequently read or w…
EPSS: 0.002 (44.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N.
Affected products
- Ibm Websphere_portal — versions 6.1.0.0, 6.1.0.1, 6.1.0.2
- N/a — versions n/a
References
- 1035324 (vdb-entry, x_refsource_SECTRACK)
- PI53426 (vendor-advisory, x_refsource_AIXAPAR)
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
Frequently asked questions
- What is CVE-2015-7472?
- CVE-2015-7472 is a high-severity vulnerability in Ibm Websphere_portal. CVSS score: 7.2/10. Published 2016-02-15.
- How severe is CVE-2015-7472?
- High severity. CVSS v3 base score is 7.2 out of 10.