Skip to main content

Interact CVE-2025-15288

LOW
Incorrect Authorization (CWE-863)
2026-01-29 3938794e-25f5-4123-a1ba-5cbd7f104512
Authentication Bypass Interact
3.1
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.1 LOW
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 22:00 vuln.today
CVE Published
Jan 29, 2026 - 21:15 nvd
LOW 3.1

DescriptionCVE.org

Tanium addressed an improper access controls vulnerability in Interact.

AnalysisAI

Tanium addressed an improper access controls vulnerability in Interact. [CVSS 3.1 LOW]

Technical ContextAI

Classified as CWE-863 (Incorrect Authorization). Affects Interact. Tanium addressed an improper access controls vulnerability in Interact.

RemediationAI

Monitor vendor advisories for a patch. Restrict network access to the affected service where possible.

More in Interact

View all
CVE-2016-5889 HIGH
8.8 May 10

IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execut
CVE-2026-2350 MEDIUM
6.5 Feb 20

Tanium Interact logs sensitive information that authenticated users can access, potentially exposing confidential data t
CVE-2023-5659 MEDIUM
6.4 Nov 07

The Interact: Embed A Quiz On Your Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin
CVE-2016-5888 MEDIUM
5.4 May 10

IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site scripting. Rated medium severity (CVSS 5.4), this vulne
CVE-2023-41103 MEDIUM
5.4 Sep 11

Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a
CVE-2025-15289 LOW
3.1 Feb 05

Tanium addressed an improper access controls vulnerability in Interact. [CVSS 3.1 LOW]
CVE-2026-6416 LOW
2.7 Apr 22

Uncontrolled resource consumption in Tanium Interact allows authenticated high-privilege administrators to trigger a den

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2017-4915 HIGH POC
7.8
CVE-2024-6782 CRITICAL POC
9.8
CVE-2024-38856 CRITICAL POC
9.8
CVE-2023-22518 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2025-15288 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy