CVE-2015-7436

2.5 lowEPSS 0.3%

Low (2.5) in ibm tivoli common reporting. EPSS 0.3% chance of exploitation in the next 30 days.

IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership.

Severity

CVSS 3.0

2.5 low

CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2016-01-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_common_reporting

References

http://www-01.ibm.com/support/docview.wss?uid=swg21972799
http://www-01.ibm.com/support/docview.wss?uid=swg21972799

Check your stack JSON