CVE-2015-7435

2.5 lowEPSS 0.3%

Low (2.5) in ibm tivoli common reporting. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 allows local users to bypass the Cognos Application Firewall (CAF) protection mechanism via leading whitespace in the BackURL field.

Severity

CVSS 3.0

2.5 low

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-254
Published: 2016-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_common_reporting

References

http://www-01.ibm.com/support/docview.wss?uid=swg21972799
http://www-01.ibm.com/support/docview.wss?uid=swg21972799

Check your stack JSON