CVE-2015-4989: IBM Tealeaf Customer Experience

Low severity, CVSS 3.7. EPSS: 0.9% chance of exploitation in the next 30 days.

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name.

Affected products

• IBM Tealeaf Customer Experience: up to and including 8.6; version 8.7 only; version 8.8 only; version 9.0.0 only; version 9.0.0a only; version 9.0.1 only; …

Published 2016-01-02. Last modified 2026-06-17.