CVE-2015-7441

6.8 mediumEPSS 1.4%

Medium (6.8) in ibm. EPSS 1.4% chance of exploitation in the next 30 days.

Remote Artifact Loader (RAL) in IBM WebSphere Process Server 7 and Business Process Manager Advanced 7.5 through 7.5.1.2, 8.0 through 8.0.1.3, 8.5.0 through 8.5.0.2, 8.5.5 through 8.5.5.0, and 8.5.6 through 8.5.6.2 does not properly use SSL for its HTTPS connection, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Severity

CVSS 3.0

6.8 medium

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-17
Published: 2016-01-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:business_process_manager
ibm:websphere_process_server

References

http://www-01.ibm.com/support/docview.wss?uid=swg1JR54760
http://www.securitytracker.com/id/1034531
http://www.securitytracker.com/id/1034532
https://www-01.ibm.com/support/docview.wss?uid=swg21971968
http://www-01.ibm.com/support/docview.wss?uid=swg1JR54760

Check your stack JSON