Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2015-7447

IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5.0 before CF09 allows remote attackers to bypass intended Portal AccessControl REST API access restrictions and obtain sensitive information via unspecified vectors.

  • Published: Dec 31, 2015
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-7447
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.3
  • AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
ibm / websphere_portal 7.0.0.1 7.0.0.1.x
ibm / websphere_portal 8.5.0.0 8.5.0.0.x
ibm / websphere_portal 8.0.0.1 8.0.0.1.x
ibm / websphere_portal 7.0.0.0 7.0.0.0.x
ibm / websphere_portal 8.0.0.0 8.0.0.0.x
ibm / websphere_portal 6.1.5.1 6.1.5.1.x
ibm / websphere_portal 6.1.5.0 6.1.5.0.x
ibm / websphere_portal 6.1.0.5 6.1.0.5.x
ibm / websphere_portal 6.1.5.3 6.1.5.3.x
ibm / websphere_portal 6.1.0.2 6.1.0.2.x
ibm / websphere_portal 6.1.5.2 6.1.5.2.x
ibm / websphere_portal 6.1.0.1 6.1.0.1.x
ibm / websphere_portal 6.1.0.4 6.1.0.4.x
ibm / websphere_portal 6.1.0.3 6.1.0.3.x
ibm / websphere_portal 6.1.0.0 6.1.0.0.x
ibm / websphere_portal 7.0.0.2 7.0.0.2.x
ibm / websphere_portal 6.1.0.6 6.1.0.6.x