CVE-2015-1885: IBM WebSphere Application Server

High severity, CVSS 9.3. EPSS: 3.4% chance of exploitation in the next 30 days.

WebSphereOauth20SP.ear in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.39, 8.0 before 8.0.0.11, 8.5 Liberty Profile before 8.5.5.5, and 8.5 Full Profile before 8.5.5.6, when the OAuth grant type requires sending a password, allows remote attackers to gain privileges via unspecified vectors.

Affected products

• IBM WebSphere Application Server: version 7.0 only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.10 only; version 7.0.0.11 only; …

Published 2015-04-27. Last modified 2026-06-17.