IBM Capacity Management Analytics vulnerabilities

3 CVEs affecting IBM Capacity Management Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7434, published 2018-03-26.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7434, published 2018-03-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107863.
• CVE-2015-7433, published 2018-03-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging access to the CMA install machine. IBM X-Force ID: 107862.
• CVE-2015-7432, published 2018-03-26. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to setenv.sh and parameter.txt. IBM X-Force ID: 107861.