CVE-2015-7436: ibm tivoli_common_reporting
Vulnerability summary
CVE-2015-7436 is a low (CVSS 2.5) vulnerability in ibm tivoli_common_reporting. EPSS estimates a 0.28% chance of exploitation in the next 30 days, higher than 19.4% of scored vulnerabilities.
Timeline
- 02-01-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
IBM Tivoli Common Reporting (TCR) 2.1 before IF14, 2.1.1 before IF22, 2.1.1.2 before IF9, 3.1.0.0 through 3.1.2 as used in Cognos Business Intelligence before 10.2 IF16, and 3.1.2.1 as used in Cognos Business Intelligence before 10.2.1.1 IF12 preserves user permissions across group-add and group-remove operations, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging administrative changes to group membership.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.28%
Chance of exploitation in the next 30 days
Percentile
19%
Versus all other CVEs
30-day change
-0.06 pp
From 0.34% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ibm1 product
- tivoli_common_reporting2.1 | 2.1.1 | 2.1.1.2 | 3.1 | 3.1.0.1 | 3.1.0.2 | 3.1.2 | 3.1.2.1
1 vendor · 1 product