CVE-2015-1904

no score yetEPSS 1.4%

ibm business process manager: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.

IBM Business Process Manager (BPM) 8.0.x through 8.0.1.3, 8.5.0 through 8.5.0.1, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.0, when external Enterprise Content Management (ECM) integration is enabled with a certain technical system account configuration, allows remote authenticated users to bypass intended document-access restrictions via a (1) upload or (2) download action.

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2015-08-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:business_process_manager

References

http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209
http://www-01.ibm.com/support/docview.wss?uid=swg21960293
http://www.securitytracker.com/id/1033159
http://www-01.ibm.com/support/docview.wss?uid=swg1JR53209
http://www-01.ibm.com/support/docview.wss?uid=swg21960293

Check your stack JSON