CVE-2015-0180

The Connector Migration Tool in IBM InfoSphere Information Server 8.1 through 11.3 allows remote authenticated users to bypass intended restrictions on job creation and modification via unspecified vectors.

• CWE-284

• http://www-01.ibm.com/support/docview.wss?uid=swg1JR51665Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21697306Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1JR51665Patch, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21697306Patch, Vendor Advisory

Published

May 25, 2015

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0174The SNMP implementation in IBM WebSphere Application Server …
• CVE-2015-0175IBM WebSphere Application Server (WAS) 8.5 Liberty Profile b…
• CVE-2015-0176Cross-site scripting (XSS) vulnerability in MQ XR WebSockets…
• CVE-2015-0177Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2015-0178The Java overlay feature in IBM Bluemix Liberty before 1.13-…
• CVE-2015-0179Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5…
• CVE-2015-0189The cluster repository manager in IBM WebSphere MQ 7.5 befor…
• CVE-2015-0191Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-0192Unspecified vulnerability in IBM Java 8 before SR1, 7 R1 bef…9.8
• CVE-2015-0193Cross-site scripting (XSS) vulnerability in IBM Business Pro…
• CVE-2015-0194XML External Entity (XXE) vulnerability in IBM Sterling B2B …
• CVE-2015-0195Cross-site scripting (XSS) vulnerability in IBM Content Temp…