2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7442 | — | — | 0.4% | Jan 2, 2016 | consoleinst.sh in IBM Installation Manager before 1.7.4.4 and 1.8.x before 1.8.4 and Packaging Utility before 1.7.4.4 an... |
| CVE-2015-7429 | — | — | 1.0% | Jan 2, 2016 | The Data Protection extension in the VMware GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Protection ... |
| CVE-2015-7402 | — | — | 0.6% | Jan 2, 2016 | Cross-site scripting (XSS) vulnerability in IBM Curam Social Program Management 6.1 before 6.1.1.1 allows remote authent... |
| CVE-2015-5020 | — | — | 1.2% | Jan 2, 2016 | The Big SQL component in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0 allows remote authenticated users to ... |
| CVE-2015-5018 | — | — | 2.7% | Jan 2, 2016 | IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before... |
| CVE-2015-4996 | — | — | 0.3% | Jan 2, 2016 | IBM Rational ClearQuest 7.1.x and 8.0.0.x before 8.0.0.17 and 8.0.1.x before 8.0.1.10 allows local users to spoof databa... |
| CVE-2015-4990 | — | — | 0.3% | Jan 2, 2016 | The portal in IBM Tealeaf Customer Experience before 8.7.1.8818, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.... |
| CVE-2015-4989 | — | — | 0.9% | Jan 2, 2016 | The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.... |
| CVE-2015-7456 | — | — | 1.0% | Jan 1, 2016 | IBM Spectrum Scale 4.1.1 before 4.1.1.4, and 4.2.0.0, allows remote authenticated users to discover object-storage admin... |
| CVE-2015-7409 | — | — | 0.6% | Jan 1, 2016 | Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.2.x before 7.2.6 allows remote authenticated user... |
| CVE-2015-7445 | — | — | 1.0% | Jan 1, 2016 | IBM Multi-Enterprise Integration Gateway 1.0 through 1.0.0.1 and B2B Advanced Communications 1.x before 1.0.0.4, when gu... |
| CVE-2015-7421 | — | — | 1.8% | Jan 1, 2016 | Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive... |
| CVE-2015-7420 | — | — | 1.9% | Jan 1, 2016 | Unspecified vulnerability in GSKit on IBM MQ M2000 appliances before 8.0.0.4 allows remote attackers to obtain sensitive... |
| CVE-2015-7415 | — | — | 0.6% | Jan 1, 2016 | Multiple cross-site scripting (XSS) vulnerabilities in IBM UrbanCode Deploy 6.0 before 6.0.1.12, 6.1 before 6.1.3.2, and... |
| CVE-2015-7410 | — | — | 0.9% | Jan 1, 2016 | The Health Check tool in IBM Sterling B2B Integrator 5.2 does not properly use cookies in conjunction with HTTPS session... |
| CVE-2015-5049 | — | — | 0.7% | Jan 1, 2016 | SQL injection vulnerability in the API in IBM OpenPages GRC Platform 7.0 before 7.0.0.4 IF3 and 7.1 before 7.1.0.1 IF6 a... |
| CVE-2015-4943 | — | — | 2.4% | Jan 1, 2016 | IBM WebSphere MQ Light 1.x before 1.0.2 allows remote attackers to cause a denial of service (MQXR service crash) via a ... |
| CVE-2015-4941 | — | — | 2.4% | Jan 1, 2016 | IBM WebSphere MQ Light 1.x before 1.0.2 mishandles abbreviated TLS handshakes, which allows remote attackers to cause a ... |
| CVE-2015-7489 | — | — | 0.4% | Jan 1, 2016 | IBM SPSS Statistics 22.0.0.2 before IF10 and 23.0.0.2 before IF7 uses weak permissions (Everyone: Write) for Python scri... |
| CVE-2015-7441 | — | — | 1.4% | Jan 1, 2016 | Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2... |
| CVE-2015-5990 | — | — | 0.6% | Dec 31, 2015 | Cross-site request forgery (CSRF) vulnerability on Belkin F9K1102 2 devices with firmware 2.10.17 allows remote attacker... |
| CVE-2015-5989 | — | — | 2.8% | Dec 31, 2015 | Belkin F9K1102 2 devices with firmware 2.10.17 rely on client-side JavaScript code for authorization, which allows remot... |
| CVE-2015-5988 | — | — | 2.7% | Dec 31, 2015 | The web management interface on Belkin F9K1102 2 devices with firmware 2.10.17 has a blank password, which allows remote... |
| CVE-2015-5987 | — | — | 1.3% | Dec 31, 2015 | Belkin F9K1102 2 devices with firmware 2.10.17 use an improper algorithm for selecting the ID value in the header of a D... |
| CVE-2015-1947 | — | — | 0.4% | Dec 31, 2015 | Untrusted search path vulnerability in IBM InfoSphere BigInsights 3.0, 3.0.0.1, 3.0.0.2, and 4.0, when a DB2 database is... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now