CVE-2015-4987

The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass authentication via unspecified vectors. IBM X-Force ID: 105896.

• CWE-287

• http://www-01.ibm.com/support/docview.wss?uid=swg21981017Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/105896VDB Entry, Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21981017Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/105896VDB Entry, Vendor Advisory

Published

Mar 27, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-4968Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-4971Cross-site scripting (XSS) vulnerability in IBM Emptoris Str…
• CVE-2015-4973Cross-site scripting (XSS) vulnerability in IBM Multi-Enterp…
• CVE-2015-4974IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.2…
• CVE-2015-4980Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 …
• CVE-2015-4981IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.2…
• CVE-2015-4988Directory traversal vulnerability in the replay server in IB…
• CVE-2015-4989The portal in IBM Tealeaf Customer Experience before 8.7.1.8…
• CVE-2015-4990The portal in IBM Tealeaf Customer Experience before 8.7.1.8…
• CVE-2015-4991IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF01…
• CVE-2015-4992IBM Sterling B2B Integrator 5.2 before 5020500_8 allows remo…
• CVE-2015-4993Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…