# CVEs published 2015-04-22

5 CVEs were published on April 22, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3404](https://cve.now/CVE-2015-3404.md): The Certify module before 6.x-2.3 for Drupal does not properly perform node access checks, which allows remote authenticated users to bypass (no CVSS)
- [CVE-2015-1484](https://cve.now/CVE-2015-1484.md): Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, (no CVSS)
- [CVE-2015-1889](https://cve.now/CVE-2015-1889.md): The Big SQL component in IBM InfoSphere BigInsights 3.0 through 3.0.0.2 allows remote authenticated users to bypass intended HDFS data-acces (no CVSS)
- [CVE-2015-0704](https://cve.now/CVE-2015-0704.md): Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to (no CVSS)
- [CVE-2015-0705](https://cve.now/CVE-2015-0705.md): Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.