CVE-2015-0141

Severity: medium (CVSS 4.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-10-03 · updated 2026-06-17
Weakness: CWE-284

Description

IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1 before FP1 allows remote authenticated users to modify arbitrary user filters via a JSON request.

Affected products

IBM OpenPages GRC Platform: 6.2.0.0, 6.2.1.0, 6.2.1.1, 7.0.0.0, 7.1.0.0

References

http://www-01.ibm.com/support/docview.wss?uid=swg21963358
http://www-01.ibm.com/support/docview.wss?uid=swg21963358

Get alerted when CVE-2015-0141 or the next vulnerability affects your stack