[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJjBmqSZ2D12sFytlWZivxkVQHVOYw5ZukzSjWxjoOig":3,"g5a-risk:CVE-2015-1961":253},{"success":4,"data":5,"meta":251},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":29,"epssPercentile":15,"epssTimeSeries":30,"severity":32,"affectedProducts":33,"affectedProductsCount":75,"references":76,"referencesCount":27,"weaknesses":102,"weaknessesCount":111,"isActivelyExploited":112,"cisaInfo":15,"otxData":15,"relatedBlogPosts":113,"seoMetadata":114,"configurations":139,"relatedVendorCves":249,"notableEvents":250},"CVE-2015-1961","What is CVE-2015-1961?","The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.","The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 thro...","2015-07-13T16:59:00.09","2025-04-12T10:46:40.837",9,"AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":26,"ExploitabilityScore":27,"ImpactScore":28,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","NETWORK","LOW","SINGLE","COMPLETE","HIGH",8,10,0.02392,[31,31,31,29,29,29,29],0.0241,"Critical",[34,39,42,45,48,51,54,57,60,63,66,69,72],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"ibm","business_process_manager","7.5.0.0","cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":40,"criteria":41,"vulnerable":4},"7.5.0.1","cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":43,"criteria":44,"vulnerable":4},"7.5.1.0","cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":46,"criteria":47,"vulnerable":4},"7.5.1.1","cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":49,"criteria":50,"vulnerable":4},"8.0.0.0","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":52,"criteria":53,"vulnerable":4},"8.0.1.0","cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":55,"criteria":56,"vulnerable":4},"8.0.1.1","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":58,"criteria":59,"vulnerable":4},"8.0.1.2","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":61,"criteria":62,"vulnerable":4},"8.0.1.3","cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":64,"criteria":65,"vulnerable":4},"8.5.0.0","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":67,"criteria":68,"vulnerable":4},"8.5.0.1","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":70,"criteria":71,"vulnerable":4},"8.5.5.0","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",{"vendor":35,"product":36,"version":73,"criteria":74,"vulnerable":4},"8.5.6.0","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",13,[77,83,86,90,94,96,98,100],{"url":78,"source":79,"tags":80},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1JR53356","Ibm",[81,82],"Patch","Vendor Advisory",{"url":84,"source":79,"tags":85},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21959052",[81,82],{"url":87,"source":88,"tags":89},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75536","Securityfocus",[],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1032972","Securitytracker",[],{"url":78,"source":79,"tags":95},[81,82],{"url":84,"source":79,"tags":97},[81,82],{"url":87,"source":88,"tags":99},[],{"url":91,"source":92,"tags":101},[],[103],{"id":104,"name":105,"description":106,"extendedDescription":107,"status":108,"abstraction":109,"structure":110},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",1,false,[],{"title":115,"metaDescription":116,"keywords":117,"canonicalUrl":118,"structuredData":119},"What is CVE-2015-1961? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-1961, a critical severity cyber security vulnerability from 2015. The REST API in IBM Business Process Manager (BPM) 7.5.x...","CVE-2015-1961, CVE-2015-1961 vulnerability, CVE-2015-1961 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, ibm security, business_process_manager vulnerability","\u002Fwhat-is\u002Fcve-2015-1961",{"@context":120,"@type":121,"headline":115,"description":116,"datePublished":10,"dateModified":11,"author":122,"publisher":126,"about":130,"mainEntityOfPage":134,"articleSection":137,"keywords":138},"https:\u002F\u002Fschema.org","TechArticle",{"@type":123,"name":124,"url":125},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":123,"name":124,"url":125,"logo":127},{"@type":128,"url":129},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":131,"name":6,"description":132,"additionalType":133},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":135,"@id":136},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-1961","Cybersecurity","CVE-2015-1961, CVE-2015-1961 vulnerability, CVE-2015-1961 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[140],{"Operator":15,"Negate":15,"Nodes":141},[142],{"Operator":143,"Negate":15,"CPEMatch":144},"OR",[145,147,150,153,155,158,161,163,166,169,171,174,177,179,182,185,187,190,193,195,198,201,203,206,209,211,214,217,219,222,225,227,230,233,235,238,241,243,246],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":146,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"91BDDE54-95C6-4E95-9427-D83E61355E3D",{"Vulnerable":4,"Criteria":148,"MatchCriteriaID":149,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*","A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*","1D338AF3-8FE6-4E51-B961-344E157EECFD",{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":154,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8057C7D0-978D-490B-BE80-597A2CB27A77",{"Vulnerable":4,"Criteria":156,"MatchCriteriaID":157,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*","16617000-4388-43EF-AE14-8C108068155F",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*","E4B6A964-F948-4FAA-A6C7-41641AF12504",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":162,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3DEBE193-CDE1-406C-9042-4085AA0EED8E",{"Vulnerable":4,"Criteria":164,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*","05B6C389-9332-4C33-A3AD-270A54AC564E",{"Vulnerable":4,"Criteria":167,"MatchCriteriaID":168,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*","07630F25-A03C-401D-A16A-51B63014C963",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":170,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EF781F2F-05FB-4DBD-8BC1-98A630CD375A",{"Vulnerable":4,"Criteria":172,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*","17E42B0A-0947-4799-993F-CBF8A84EBD4B",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*","E95968B6-FF99-4234-9EC7-6EAA9C7DA753",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":178,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E71AC948-9F71-403E-8035-172D5F667B54",{"Vulnerable":4,"Criteria":180,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*","FE68791B-B7AE-4715-810E-0C278E5C363F",{"Vulnerable":4,"Criteria":183,"MatchCriteriaID":184,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*","37281A0A-3BE1-4B22-840F-65CA7B8AB360",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":186,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E77872E9-D66C-47FF-AA1D-7764D65997A8",{"Vulnerable":4,"Criteria":188,"MatchCriteriaID":189,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*","00CC8270-5ABE-428C-9090-16EC8298E50C",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*","446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":194,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7B3D03C8-B7F4-43AF-9270-555507AAC527",{"Vulnerable":4,"Criteria":196,"MatchCriteriaID":197,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*","A05F59A1-3063-45ED-B1E8-AABC4FC0A807",{"Vulnerable":4,"Criteria":199,"MatchCriteriaID":200,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*","3FC25EB0-CA22-4176-8752-8BD26B111F2C",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":202,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"E69BBEFA-B321-4085-AEA1-BAE2B0B54524",{"Vulnerable":4,"Criteria":204,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*","60F679C8-74FB-40F5-A5B8-FBD6BF424379",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*","7C097D2E-5BB7-4979-A755-E928094A92C1",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BE4F0900-83C3-4228-9F3B-2664C1C816F9",{"Vulnerable":4,"Criteria":212,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*","0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B",{"Vulnerable":4,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*","021FABA7-6B97-4511-8E07-B7A34A387493",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":218,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9942841D-3E36-4159-AA5A-B534CB701B6A",{"Vulnerable":4,"Criteria":220,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","8FE10C1D-2077-435A-8C14-2746A685681C",{"Vulnerable":4,"Criteria":223,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","F6E31F25-6E71-4A5C-A940-0A935AF19035",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"7A1FCB4E-DC46-4780-9017-1E8E789E785F",{"Vulnerable":4,"Criteria":228,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","EE43BACD-D187-49C9-85D1-51E3F71D2274",{"Vulnerable":4,"Criteria":231,"MatchCriteriaID":232,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","F646DABB-4C10-4308-8169-EC42C358CF41",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":234,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1",{"Vulnerable":4,"Criteria":236,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","80D84C06-5E93-4DA4-A333-D3CECB7D74E4",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","DF7E8429-8750-4D3C-90E1-829031C7C306",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"66A4A455-A75B-4363-AC6D-DAD50287EB99",{"Vulnerable":4,"Criteria":244,"MatchCriteriaID":245,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*","D06A925E-C739-48A9-B211-36DE458A7898",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*","12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA",[],[],{"lastModified":11,"cacheTime":252,"version":21},1793225467055,{"score":254,"band":255,"action":256,"scoredAt":257},54,"Medium","Plan remediation","2026-10-28T06:39:40.419528+00:00"]