CVE-2015-7463

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-03-15 · updated 2026-06-17
Weakness: CWE-285

Description

IBM Business Process Manager 7.5.x, 8.0.x, 8.5.0, 8.5.5, and 8.5.6.0 through cumulative fix 2 allow remote authenticated users to delete process and task data by leveraging incorrect authorization checks. IBM X-Force ID: 108393.

Affected products

IBM Business Process Manager: 7.5.0.0, 7.5.0.1, 7.5.1.0, 7.5.1.1, 7.5.1.2, 8.0.0.0 (+9)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21973442
https://exchange.xforce.ibmcloud.com/vulnerabilities/108393
http://www-01.ibm.com/support/docview.wss?uid=swg21973442
https://exchange.xforce.ibmcloud.com/vulnerabilities/108393

Get alerted when CVE-2015-7463 or the next vulnerability affects your stack