CVE-2015-7494

A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.

• CWE-284

• http://www.ibm.com/support/docview.wss?uid=swg2C1000140Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94438Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg2C1000140Patch, Vendor Advisory
• http://www.securityfocus.com/bid/94438Third Party Advisory, VDB Entry

Published

Feb 8, 2017

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7488IBM Spectrum Scale 4.1.1.x before 4.1.1.4 and 4.2.x before 4…
• CVE-2015-7489IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before…
• CVE-2015-7490IBM InfoSphere Information Server 8.5 through FP3, 8.7 throu…
• CVE-2015-7491Cross-site scripting (XSS) vulnerability in IBM WebSphere Po…
• CVE-2015-7492Cross-site scripting (XSS) vulnerability in Reference Data M…
• CVE-2015-7493IBM InfoSphere Information Server could allow a local user u…
• CVE-2015-7496GNOME Display Manager (gdm) before 3.18.2 allows physically …
• CVE-2015-7497Heap-based buffer overflow in the xmlDictComputeFastQKey fun…
• CVE-2015-7498Heap-based buffer overflow in the xmlParseXmlDecl function i…
• CVE-2015-7499Heap-based buffer overflow in the xmlGROW function in parser…
• CVE-2015-7500The xmlParseMisc function in parser.c in libxml2 before 2.9.…
• CVE-2015-7501Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5…