VYPR
← All advisories
Low severity3.1NVD Advisory· Published Feb 29, 2016· Updated Jun 17, 2026

CVE-2015-7455

CVE-2015-7455

Description

IBM WebSphere Portal 7.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF20, and 8.5.x before 8.5.0.0 CF09 uses weak permissions for content items, which allows remote authenticated users to make modifications via the authoring UI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • IBM/Websphere Portal7 versions
    cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:ibm:websphere_portal:7.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_portal:7.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_portal:7.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_portal:8.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_portal:8.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:websphere_portal:8.5.0.0:*:*:*:*:*:*:*
    • (no CPE)range: >= 7.0, <= 7.0.0.2 CF29; >= 8.0, < 8.0.0.1 CF20; >= 8.5, < 8.5.0.0 CF09

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.