Unrated severityNVD Advisory· Published Jul 13, 2015· Updated Jun 17, 2026
CVE-2015-1961
CVE-2015-1961
Description
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
40cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*+ 39 more
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*
- (no CPE)range: 7.5.x - 8.5.6.0
Patches
Vulnerability mechanics
References
4- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/75536nvd
- www.securitytracker.com/id/1032972nvd
News mentions
0No linked articles in our index yet.