Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14666
HistoryMar 18, 2024 - 12:00 a.m.

IBM Integration Bus for z/OS Cross-Site Request Forgery Vulnerability

2024-03-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
ibm
integration bus
z/os
cross-site request forgery
vulnerability
exploited
unauthorized actions
soa environments
non-soa environments
cnvd

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

IBM Integration Bus (IBM WebSphere Message Broker) is an enterprise service bus (ESB) product from International Business Machines (IBM). The product provides connectivity and common data transformation for Service Oriented Architecture (SOA) environments and non-SOA environments. A cross-site request forgery vulnerability exists in IBM Integration Bus for z/OS, which can be exploited by an attacker to perform malicious and unauthorized actions transmitted from a user trusted by the site.

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.9%

Related for CNVD-2024-14666