EUVD-2015-2051

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server fails to implement user roles, enabling local users to gain privileges.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager shipped with IBM Cloud Orchestrator and IBM SmartCloud Orchestrator	17 Jun 201822:30	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2015-1946)	22 Sep 202203:02	–	ibm
IBM Security Bulletins	Security Bulletin:A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Network Manager IP Edition (CVE-2015-1885, CVE-2015-0250, CVE-2015-1927, and CVE-2015-1946)	17 Jun 201815:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability in IBM WebSphere Application Server affects IBM Security Access Manager for Web version 7.0 software installations and IBM Tivoli Access Manager for e-business (CVE-2015-1946)	16 Jun 201821:31	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Business Process Manager, and other bundling products shipped with IBM SmartCloud Orchestrator and SmartCloud Orchestrator Enterprise	17 Jun 201822:30	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM Operations Analytics - Predictive Insights (CVE-2015-1885, CVE-2015-1927, CVE-2015-1946)	17 Jun 201815:07	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Rational RequisitePro (CVE-2015-1946)	17 Jun 201805:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Jazz for Service Management Recommends to Install IBM Websphere Application Server Fixes to fix Multiple Security Vulnerabilities	17 Jun 201815:07	–	ibm
IBM Security Bulletins	Security Bulletin: Three security vulnerabilities have been identified in WebSphere Application Server shipped with IBM eDiscovery Manager (CVE-2015-1885, CVE-2015-1927, CVE-2015-1946)	17 Jun 201812:12	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "a5bfa1df-2763-3dcd-96d2-50e5808bb0b1",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c5d5a8b1-14e9-38b9-b65e-07a213461b9d",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
securityfocus	www.securityfocus.com/bid/75496
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 24.4

EPSS0.00058