Medium severity5.4NVD Advisory· Published Mar 20, 2018· Updated Jun 17, 2026
CVE-2015-7459
CVE-2015-7459
Description
Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 108355.
Affected products
5cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:ibm:connections:*:*:*:*:*:*:*:*range: <=3.0.1.1
- cpe:2.3:a:ibm:connections:4.0.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:connections:4.5.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:connections:5.0.0.0:*:*:*:*:*:*:*
- (no CPE)range: <=3.0.1.1, 4.0, 4.5, <5.0 CR4
Patches
Vulnerability mechanics
References
2- www-01.ibm.com/support/docview.wssnvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/108355nvdVDB EntryVendor Advisory
News mentions
0No linked articles in our index yet.