# Vulnerabilities published in 2015


- [CVE-2015-7497](https://insights.sbomify.com/CVE-2015-7497/): Memory corruption in n/a (medium 5.0)
- [CVE-2015-7496](https://insights.sbomify.com/CVE-2015-7496/): Security feature bypass in n/a (high 7.2)
- [CVE-2015-7494](https://insights.sbomify.com/CVE-2015-7494/): Missing authorization in Cloud Orchestrator (low 2.8)
- [CVE-2015-7493](https://insights.sbomify.com/CVE-2015-7493/): Information disclosure in InfoSphere Information Server (medium 4.7)
- [CVE-2015-7492](https://insights.sbomify.com/CVE-2015-7492/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7491](https://insights.sbomify.com/CVE-2015-7491/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7490](https://insights.sbomify.com/CVE-2015-7490/): Auth bypass in n/a (low 3.1)
- [CVE-2015-7489](https://insights.sbomify.com/CVE-2015-7489/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7488](https://insights.sbomify.com/CVE-2015-7488/): Information disclosure in n/a (medium 5.9)
- [CVE-2015-7487](https://insights.sbomify.com/CVE-2015-7487/): Information disclosure in n/a (medium 4.1)
- [CVE-2015-7486](https://insights.sbomify.com/CVE-2015-7486/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7485](https://insights.sbomify.com/CVE-2015-7485/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7484](https://insights.sbomify.com/CVE-2015-7484/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7474](https://insights.sbomify.com/CVE-2015-7474/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7473](https://insights.sbomify.com/CVE-2015-7473/): Auth bypass in n/a (low 2.5)
- [CVE-2015-7472](https://insights.sbomify.com/CVE-2015-7472/): Other in n/a (high 7.2)
- [CVE-2015-7471](https://insights.sbomify.com/CVE-2015-7471/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2015-7470](https://insights.sbomify.com/CVE-2015-7470/): Information disclosure in n/a (high 7.5)
- [CVE-2015-7469](https://insights.sbomify.com/CVE-2015-7469/): Auth bypass in n/a (medium 4.3)
- [CVE-2015-7468](https://insights.sbomify.com/CVE-2015-7468/): Privilege escalation in n/a (medium 4.3)
- [CVE-2015-7467](https://insights.sbomify.com/CVE-2015-7467/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7466](https://insights.sbomify.com/CVE-2015-7466/): Other in n/a (low 3.1)
- [CVE-2015-7465](https://insights.sbomify.com/CVE-2015-7465/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2015-7464](https://insights.sbomify.com/CVE-2015-7464/): Denial of service in n/a (high 7.5)
- [CVE-2015-7463](https://insights.sbomify.com/CVE-2015-7463/): Missing authorization in n/a (medium 4.3)
- [CVE-2015-7462](https://insights.sbomify.com/CVE-2015-7462/): Information disclosure in n/a (medium 4.4)
- [CVE-2015-7461](https://insights.sbomify.com/CVE-2015-7461/): XML external entity in n/a (medium 6.5)
- [CVE-2015-7460](https://insights.sbomify.com/CVE-2015-7460/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7459](https://insights.sbomify.com/CVE-2015-7459/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7458](https://insights.sbomify.com/CVE-2015-7458/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7457](https://insights.sbomify.com/CVE-2015-7457/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7456](https://insights.sbomify.com/CVE-2015-7456/): Information disclosure in n/a (medium 6.5)
- [CVE-2015-7455](https://insights.sbomify.com/CVE-2015-7455/): Missing authorization in n/a (low 3.1)
- [CVE-2015-7454](https://insights.sbomify.com/CVE-2015-7454/): Missing authorization in n/a (medium 4.3)
- [CVE-2015-7453](https://insights.sbomify.com/CVE-2015-7453/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7452](https://insights.sbomify.com/CVE-2015-7452/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7451](https://insights.sbomify.com/CVE-2015-7451/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7450](https://insights.sbomify.com/CVE-2015-7450/): IBM WebSphere Application Server and Server Hypervisor Edition Code Injection. (critical 9.8, exploited in the wild)
- [CVE-2015-7449](https://insights.sbomify.com/CVE-2015-7449/): Weak cryptography in n/a (low 3.3)
- [CVE-2015-7448](https://insights.sbomify.com/CVE-2015-7448/): SQL injection in n/a (medium 5.4)
- [CVE-2015-7447](https://insights.sbomify.com/CVE-2015-7447/): Information disclosure in n/a (medium 5.3)
- [CVE-2015-7446](https://insights.sbomify.com/CVE-2015-7446/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2015-7445](https://insights.sbomify.com/CVE-2015-7445/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7444](https://insights.sbomify.com/CVE-2015-7444/): Information disclosure in n/a (medium 5.3)
- [CVE-2015-7442](https://insights.sbomify.com/CVE-2015-7442/): Privilege escalation in n/a (high 7.0)
- [CVE-2015-7441](https://insights.sbomify.com/CVE-2015-7441/): Weak cryptography in n/a (medium 6.8)
- [CVE-2015-7440](https://insights.sbomify.com/CVE-2015-7440/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7439](https://insights.sbomify.com/CVE-2015-7439/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7438](https://insights.sbomify.com/CVE-2015-7438/): Information disclosure in n/a (medium 4.7)
- [CVE-2015-7437](https://insights.sbomify.com/CVE-2015-7437/): Information disclosure in n/a (medium 5.5)
- [CVE-2015-7436](https://insights.sbomify.com/CVE-2015-7436/): Missing authorization in n/a (low 2.5)
- [CVE-2015-7435](https://insights.sbomify.com/CVE-2015-7435/): Security feature bypass in n/a (low 2.5)
- [CVE-2015-7434](https://insights.sbomify.com/CVE-2015-7434/): Information disclosure in n/a (high 7.8)
- [CVE-2015-7433](https://insights.sbomify.com/CVE-2015-7433/): Information disclosure in n/a (high 7.8)
- [CVE-2015-7432](https://insights.sbomify.com/CVE-2015-7432/): Information disclosure in n/a (high 7.8)
- [CVE-2015-7431](https://insights.sbomify.com/CVE-2015-7431/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7430](https://insights.sbomify.com/CVE-2015-7430/): Missing authorization in n/a (high 8.4)
- [CVE-2015-7429](https://insights.sbomify.com/CVE-2015-7429/): Missing authorization in n/a (high 8.5)
- [CVE-2015-7428](https://insights.sbomify.com/CVE-2015-7428/): Open redirect in n/a (high 7.4)
- [CVE-2015-7427](https://insights.sbomify.com/CVE-2015-7427/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-7426](https://insights.sbomify.com/CVE-2015-7426/): Command injection in n/a (critical 10.0)
- [CVE-2015-7425](https://insights.sbomify.com/CVE-2015-7425/): Privilege escalation in n/a (critical 10.0)
- [CVE-2015-7424](https://insights.sbomify.com/CVE-2015-7424/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7423](https://insights.sbomify.com/CVE-2015-7423/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7422](https://insights.sbomify.com/CVE-2015-7422/): Memory corruption in n/a (medium 5.5)
- [CVE-2015-7421](https://insights.sbomify.com/CVE-2015-7421/): Information disclosure in n/a (low 3.7)
- [CVE-2015-7420](https://insights.sbomify.com/CVE-2015-7420/): Information disclosure in n/a (low 3.7)
- [CVE-2015-7419](https://insights.sbomify.com/CVE-2015-7419/): Denial of service in n/a (high 7.8)
- [CVE-2015-7418](https://insights.sbomify.com/CVE-2015-7418/): Information disclosure in WebSphere DataPower XC10 Appliance (medium 4.4)
- [CVE-2015-7417](https://insights.sbomify.com/CVE-2015-7417/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7416](https://insights.sbomify.com/CVE-2015-7416/): Denial of service in n/a (medium 4.0)
- [CVE-2015-7415](https://insights.sbomify.com/CVE-2015-7415/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7414](https://insights.sbomify.com/CVE-2015-7414/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7413](https://insights.sbomify.com/CVE-2015-7413/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7412](https://insights.sbomify.com/CVE-2015-7412/): Weak cryptography in n/a (low 2.6)
- [CVE-2015-7411](https://insights.sbomify.com/CVE-2015-7411/): Privilege escalation in n/a (critical 9.9)
- [CVE-2015-7410](https://insights.sbomify.com/CVE-2015-7410/): Information disclosure in n/a (high 7.4)
- [CVE-2015-7409](https://insights.sbomify.com/CVE-2015-7409/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7408](https://insights.sbomify.com/CVE-2015-7408/): Missing authorization in n/a (low 3.7)
- [CVE-2015-7407](https://insights.sbomify.com/CVE-2015-7407/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2015-7404](https://insights.sbomify.com/CVE-2015-7404/): Information disclosure in n/a (low 1.9)
- [CVE-2015-7403](https://insights.sbomify.com/CVE-2015-7403/): Null dereference in n/a (medium 4.0)
- [CVE-2015-7402](https://insights.sbomify.com/CVE-2015-7402/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7401](https://insights.sbomify.com/CVE-2015-7401/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7400](https://insights.sbomify.com/CVE-2015-7400/): XML external entity in n/a (high 7.7)
- [CVE-2015-7399](https://insights.sbomify.com/CVE-2015-7399/): Information disclosure in n/a (medium 5.3)
- [CVE-2015-7398](https://insights.sbomify.com/CVE-2015-7398/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7397](https://insights.sbomify.com/CVE-2015-7397/): Open redirect in n/a (high 7.4)
- [CVE-2015-7396](https://insights.sbomify.com/CVE-2015-7396/): Missing authorization in n/a (medium 5.4)
- [CVE-2015-7395](https://insights.sbomify.com/CVE-2015-7395/): Missing authorization in n/a (medium 4.0)
- [CVE-2015-7394](https://insights.sbomify.com/CVE-2015-7394/): Privilege escalation in n/a (critical 9.0)
- [CVE-2015-7393](https://insights.sbomify.com/CVE-2015-7393/): Privilege escalation in n/a (high 7.4)
- [CVE-2015-7392](https://insights.sbomify.com/CVE-2015-7392/): Memory corruption in n/a (high 7.5)
- [CVE-2015-7391](https://insights.sbomify.com/CVE-2015-7391/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7390](https://insights.sbomify.com/CVE-2015-7390/): SQL injection in n/a (critical 9.8)
- [CVE-2015-7387](https://insights.sbomify.com/CVE-2015-7387/): SQL injection in n/a (high 7.5)
- [CVE-2015-7386](https://insights.sbomify.com/CVE-2015-7386/): Cross-site scripting in n/a (low 3.5)
- [CVE-2015-7385](https://insights.sbomify.com/CVE-2015-7385/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7384](https://insights.sbomify.com/CVE-2015-7384/): Denial of service in n/a (high 7.5)
- [CVE-2015-7383](https://insights.sbomify.com/CVE-2015-7383/): Cross-site scripting in n/a (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/18/