CVE-2017-1539

8.8 highEPSS 1.5%

IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user registry group memberships. By manipulating LDAP group membership an attack might gain privileged access. IBM X-Force ID: 130807.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
Published: 2017-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:business_process_manager

References

http://www.ibm.com/support/docview.wss?uid=swg22007451
http://www.securityfocus.com/bid/100967
https://exchange.xforce.ibmcloud.com/vulnerabilities/130807
http://www.ibm.com/support/docview.wss?uid=swg22007451
http://www.securityfocus.com/bid/100967

Check your stack JSON