VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Mar 21, 2016· Updated Jun 17, 2026

CVE-2015-7454

CVE-2015-7454

Description

Business Space in IBM WebSphere Process Server 6.1.2.0 through 7.0.0.5 and Business Process Manager Advanced 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2 allows remote authenticated users to bypass intended access restrictions and create an arbitrary page or space via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

33
  • IBM/Business Process Manager18 versions
    cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*+ 17 more
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:7.5.1.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.0.2:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.1:*:*:*:advanced:*:*:*
    • cpe:2.3:a:ibm:business_process_manager:8.5.6.2:*:*:*:advanced:*:*:*
    • (no CPE)range: 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0.x through 8.5.0.2, 8.5.5.x through 8.5.5.0, and 8.5.6.x through 8.5.6.2
  • IBM/Websphere Process Server15 versions
    cpe:2.3:a:ibm:websphere_process_server:6.1.2:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:ibm:websphere_process_server:6.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.1.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.1.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.1.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.2.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:6.2.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_process_server:7.0.0.5:*:*:*:*:*:*:*
    • (no CPE)range: 6.1.2.0 through 7.0.0.5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.