CVE-2015-1920

IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, and 8.5 before 8.5.5.6 allows remote attackers to execute arbitrary code by sending crafted instructions in a management-port session.

• CWE-284

• http://www-01.ibm.com/support/docview.wss?uid=swg1PI38302Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg21883573Patch, Vendor Advisory
• http://www.securityfocus.com/bid/74439Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032249Third Party Advisory, VDB Entry
• http://www-01.ibm.com/support/docview.wss?uid=swg1PI38302Not Applicable
• http://www-01.ibm.com/support/docview.wss?uid=swg21883573Patch, Vendor Advisory
• http://www.securityfocus.com/bid/74439Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032249Third Party Advisory, VDB Entry

Published

May 20, 2015

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-1913Rational Test Control Panel in IBM Rational Test Workbench a…
• CVE-2015-1914IBM Java 7 R1 before SR3, 7 before SR9, 6 R1 before SR8 FP4,…
• CVE-2015-1915The Endpoint Manager for Remote Control component in IBM Tiv…
• CVE-2015-1916Unspecified vulnerability in IBM Java 8 before SR1 allows re…7.5
• CVE-2015-1917Cross-site scripting (XSS) vulnerability in the Active Conte…
• CVE-2015-1919Cross-site scripting (XSS) vulnerability in IBM Security QRa…
• CVE-2015-1921Open redirect vulnerability in IBM WebSphere Portal 8.0.0 be…
• CVE-2015-1922The Data Movement implementation in IBM DB2 9.7 through FP10…
• CVE-2015-1923Buffer overflow in the server in IBM Tivoli Storage Manager …
• CVE-2015-1924Stack-based buffer overflow in the server in IBM Tivoli Stor…
• CVE-2015-1925Stack-based buffer overflow in the server in IBM Tivoli Stor…
• CVE-2015-1926Unspecified vulnerability in the Oracle WebCenter Portal com…