CVSS 3.0
2.8 lowCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:NCVE-2015-7494
Low (2.8) in ibm. EPSS 0.2% chance of exploitation in the next 30 days.
A vulnerability has been identified in IBM Cloud Orchestrator services/[action]/launch API. An authenticated domain admin user might modify cross domain resources via a /services/[action]/launch API call, provided it would have been possible for the domain admin user to gain access to a resource identifier of the other domain.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
- CWE
- CWE-284
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ibm:cloud_orchestrator
- ibm:smartcloud_orchestrator