CVE-2016-2901 in WebSphere Portal정보

요약

\~에 의해 MITRE

Cross-site request forgery (CSRF) vulnerability in the PA_Theme_Creator application in IBM WebSphere Portal 8.5 CF08 through CF10 and Web Content Manager allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

예약하다

2016. 03. 09.

공개

2016. 06. 25.

모더레이션

수락

항목

VDB-88107

CPE

준비됨

CWE

CWE-352 (확인됨)

CVSS

8.8 (NVD)

EPSS

0.00142

KEV

아니요

활동

매우 낮음

부문

Pharma, Government, ...

출처

MITRE	https://www.cve.org/CVERecord?id=CVE-2016-2901
NVD	https://nvd.nist.gov/vuln/detail/CVE-2016-2901
CVE Details	https://www.cvedetails.com/cve/CVE-2016-2901/

◂ 이전 개요 다음 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!