CVE-2016-2901 in WebSphere Portalinfo

Zusammenfassung

von MITRE

Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

09.03.2016

Veröffentlichung

25.06.2016

Moderieren

akzeptiert

Eintrag

VDB-88107

CPE

bereit

EPSS

0.00142

KEV

nein

Aktivitäten

very low

Sektor

Finance, Government, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-2901
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-2901
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-2901/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!