CVE-2016-2901 in WebSphere Portal情報

要約

〜によって MITRE

Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

予約する

2016年03月09日

公開

2016年06月25日

モデレーション

承諾済み

エントリ

VDB-88107

CPE

準備完了

CWE

CWE-352 (確認済み)

CVSS

8.8 (NVD)

EPSS

0.00142

KEV

いいえ

アクティビティ

非常低い

セクター

Finance, Hostingprovider, ...

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-2901
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-2901
CVE Details	https://www.cvedetails.com/cve/CVE-2016-2901/

◂ 前概要次 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!