IBM Optim Workload Replay vulnerabilities

3 CVEs affecting IBM Optim Workload Replay, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-1895, published 2015-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1895, published 2015-05-25. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 relies on client-side code to verify authorization, which allows remote attackers to bypass intended access restrictions by modifying the…
CVE-2014-0827, published 2014-04-05. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Workload Replay 1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-1894, published 2015-05-25. Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that…