Unrated severityNVD Advisory· Published Jul 13, 2015· Updated May 6, 2026
CVE-2015-1961
CVE-2015-1961
Description
The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.
Affected products
39cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*+ 38 more
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*
- cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- www.securityfocus.com/bid/75536nvd
- www.securitytracker.com/id/1032972nvd
News mentions
0No linked articles in our index yet.