[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fJjBmqSZ2D12sFytlWZivxkVQHVOYw5ZukzSjWxjoOig":3,"g5a-risk:CVE-2015-1961":256},{"success":4,"data":5,"meta":254},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":79,"references":80,"referencesCount":30,"weaknesses":106,"weaknessesCount":115,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":116,"seoMetadata":117,"configurations":142,"relatedVendorCves":252,"notableEvents":253},"CVE-2015-1961","What is CVE-2015-1961?","The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0 allows remote authenticated users to bypass intended access restrictions and execute arbitrary JavaScript code on the server via an unspecified API call.","The REST API in IBM Business Process Manager (BPM) 7.5.x through 7.5.1.2, 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 thro...","2015-07-13T16:59:00.09","2026-06-17T00:23:17.993",9,"AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","COMPLETE","",null,"HIGH",8,10,false,[],0.0241,[34,34,34,34,34,34,34],"Critical",[38,43,46,49,52,55,58,61,64,67,70,73,76],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"ibm","business_process_manager","7.5.0.0","cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":44,"criteria":45,"vulnerable":4},"7.5.0.1","cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":47,"criteria":48,"vulnerable":4},"7.5.1.0","cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":50,"criteria":51,"vulnerable":4},"7.5.1.1","cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":53,"criteria":54,"vulnerable":4},"8.0.0.0","cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":56,"criteria":57,"vulnerable":4},"8.0.1.0","cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":59,"criteria":60,"vulnerable":4},"8.0.1.1","cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":62,"criteria":63,"vulnerable":4},"8.0.1.2","cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":65,"criteria":66,"vulnerable":4},"8.0.1.3","cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":68,"criteria":69,"vulnerable":4},"8.5.0.0","cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":71,"criteria":72,"vulnerable":4},"8.5.0.1","cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":74,"criteria":75,"vulnerable":4},"8.5.5.0","cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:advanced:*:*:*",{"vendor":39,"product":40,"version":77,"criteria":78,"vulnerable":4},"8.5.6.0","cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:advanced:*:*:*",13,[81,87,90,94,98,100,102,104],{"url":82,"source":83,"tags":84},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg1JR53356","Ibm",[85,86],"Patch","Vendor Advisory",{"url":88,"source":83,"tags":89},"http:\u002F\u002Fwww-01.ibm.com\u002Fsupport\u002Fdocview.wss?uid=swg21959052",[85,86],{"url":91,"source":92,"tags":93},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F75536","Securityfocus",[],{"url":95,"source":96,"tags":97},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1032972","Securitytracker",[],{"url":82,"source":83,"tags":99},[85,86],{"url":88,"source":83,"tags":101},[85,86],{"url":91,"source":92,"tags":103},[],{"url":95,"source":96,"tags":105},[],[107],{"id":108,"name":109,"description":110,"extendedDescription":111,"status":112,"abstraction":113,"structure":114},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",1,[],{"title":118,"metaDescription":119,"keywords":120,"canonicalUrl":121,"structuredData":122},"What is CVE-2015-1961? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-1961, a critical severity cyber security vulnerability from 2015. The REST API in IBM Business Process Manager (BPM) 7.5.x...","CVE-2015-1961, CVE-2015-1961 vulnerability, CVE-2015-1961 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, ibm security, business_process_manager vulnerability","\u002Fwhat-is\u002Fcve-2015-1961",{"@context":123,"@type":124,"headline":118,"description":119,"datePublished":10,"dateModified":11,"author":125,"publisher":129,"about":133,"mainEntityOfPage":137,"articleSection":140,"keywords":141},"https:\u002F\u002Fschema.org","TechArticle",{"@type":126,"name":127,"url":128},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":126,"name":127,"url":128,"logo":130},{"@type":131,"url":132},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":134,"name":6,"description":135,"additionalType":136},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":138,"@id":139},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-1961","Cybersecurity","CVE-2015-1961, CVE-2015-1961 vulnerability, CVE-2015-1961 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[143],{"Operator":28,"Negate":28,"Nodes":144},[145],{"Operator":146,"Negate":32,"CPEMatch":147},"OR",[148,150,153,156,158,161,164,166,169,172,174,177,180,182,185,188,190,193,196,198,201,204,206,209,212,214,217,220,222,225,228,230,233,236,238,241,244,246,249],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":149,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"91BDDE54-95C6-4E95-9427-D83E61355E3D",{"Vulnerable":4,"Criteria":151,"MatchCriteriaID":152,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:express:*:*:*","A7B3E6D1-ADB3-4709-9E02-779EAA7A05E8",{"Vulnerable":4,"Criteria":154,"MatchCriteriaID":155,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.0.0:*:*:*:standard:*:*:*","1D338AF3-8FE6-4E51-B961-344E157EECFD",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":157,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"8057C7D0-978D-490B-BE80-597A2CB27A77",{"Vulnerable":4,"Criteria":159,"MatchCriteriaID":160,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:express:*:*:*","16617000-4388-43EF-AE14-8C108068155F",{"Vulnerable":4,"Criteria":162,"MatchCriteriaID":163,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.0.1:*:*:*:standard:*:*:*","E4B6A964-F948-4FAA-A6C7-41641AF12504",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":165,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"3DEBE193-CDE1-406C-9042-4085AA0EED8E",{"Vulnerable":4,"Criteria":167,"MatchCriteriaID":168,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:express:*:*:*","05B6C389-9332-4C33-A3AD-270A54AC564E",{"Vulnerable":4,"Criteria":170,"MatchCriteriaID":171,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.1.0:*:*:*:standard:*:*:*","07630F25-A03C-401D-A16A-51B63014C963",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":173,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"EF781F2F-05FB-4DBD-8BC1-98A630CD375A",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:express:*:*:*","17E42B0A-0947-4799-993F-CBF8A84EBD4B",{"Vulnerable":4,"Criteria":178,"MatchCriteriaID":179,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:7.5.1.1:*:*:*:standard:*:*:*","E95968B6-FF99-4234-9EC7-6EAA9C7DA753",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":181,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E71AC948-9F71-403E-8035-172D5F667B54",{"Vulnerable":4,"Criteria":183,"MatchCriteriaID":184,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:express:*:*:*","FE68791B-B7AE-4715-810E-0C278E5C363F",{"Vulnerable":4,"Criteria":186,"MatchCriteriaID":187,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.0.0:*:*:*:standard:*:*:*","37281A0A-3BE1-4B22-840F-65CA7B8AB360",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":189,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E77872E9-D66C-47FF-AA1D-7764D65997A8",{"Vulnerable":4,"Criteria":191,"MatchCriteriaID":192,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:express:*:*:*","00CC8270-5ABE-428C-9090-16EC8298E50C",{"Vulnerable":4,"Criteria":194,"MatchCriteriaID":195,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.0:*:*:*:standard:*:*:*","446C4FEE-DDB7-41C5-BC9B-7E6B08B074BC",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":197,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7B3D03C8-B7F4-43AF-9270-555507AAC527",{"Vulnerable":4,"Criteria":199,"MatchCriteriaID":200,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:express:*:*:*","A05F59A1-3063-45ED-B1E8-AABC4FC0A807",{"Vulnerable":4,"Criteria":202,"MatchCriteriaID":203,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.1:*:*:*:standard:*:*:*","3FC25EB0-CA22-4176-8752-8BD26B111F2C",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":205,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"E69BBEFA-B321-4085-AEA1-BAE2B0B54524",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:express:*:*:*","60F679C8-74FB-40F5-A5B8-FBD6BF424379",{"Vulnerable":4,"Criteria":210,"MatchCriteriaID":211,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.2:*:*:*:standard:*:*:*","7C097D2E-5BB7-4979-A755-E928094A92C1",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":213,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"BE4F0900-83C3-4228-9F3B-2664C1C816F9",{"Vulnerable":4,"Criteria":215,"MatchCriteriaID":216,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:express:*:*:*","0DDE4CB3-1162-4A51-8EBA-2A25E8B6898B",{"Vulnerable":4,"Criteria":218,"MatchCriteriaID":219,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.0.1.3:*:*:*:standard:*:*:*","021FABA7-6B97-4511-8E07-B7A34A387493",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":221,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9942841D-3E36-4159-AA5A-B534CB701B6A",{"Vulnerable":4,"Criteria":223,"MatchCriteriaID":224,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:express:*:*:*","8FE10C1D-2077-435A-8C14-2746A685681C",{"Vulnerable":4,"Criteria":226,"MatchCriteriaID":227,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.0.0:*:*:*:standard:*:*:*","F6E31F25-6E71-4A5C-A940-0A935AF19035",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":229,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7A1FCB4E-DC46-4780-9017-1E8E789E785F",{"Vulnerable":4,"Criteria":231,"MatchCriteriaID":232,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:express:*:*:*","EE43BACD-D187-49C9-85D1-51E3F71D2274",{"Vulnerable":4,"Criteria":234,"MatchCriteriaID":235,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.0.1:*:*:*:standard:*:*:*","F646DABB-4C10-4308-8169-EC42C358CF41",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":237,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"00DC7609-2519-4DB5-AA5E-A1CFCE0DA5A1",{"Vulnerable":4,"Criteria":239,"MatchCriteriaID":240,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:express:*:*:*","80D84C06-5E93-4DA4-A333-D3CECB7D74E4",{"Vulnerable":4,"Criteria":242,"MatchCriteriaID":243,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.5.0:*:*:*:standard:*:*:*","DF7E8429-8750-4D3C-90E1-829031C7C306",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":245,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"66A4A455-A75B-4363-AC6D-DAD50287EB99",{"Vulnerable":4,"Criteria":247,"MatchCriteriaID":248,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:express:*:*:*","D06A925E-C739-48A9-B211-36DE458A7898",{"Vulnerable":4,"Criteria":250,"MatchCriteriaID":251,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:ibm:business_process_manager:8.5.6.0:*:*:*:standard:*:*:*","12DA4BA4-D130-48C2-BCD0-8D76E0BADDBA",[],[],{"lastModified":11,"cacheTime":255,"version":22},1793213060628,{"score":257,"band":258,"action":259,"scoredAt":260},54,"Medium","Plan remediation","2026-07-01T10:19:31.291554+00:00"]