Lucene search

K
cvelistCertccCVELIST:CVE-2016-4311
HistoryFeb 16, 2017 - 6:00 p.m.

CVE-2016-4311

2017-02-1618:00:00
certcc
www.cve.org

8.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%

Cross-site request forgery (CSRF) vulnerability in the XACML flow feature in WSO2 Identity Server 5.1.0 allows remote attackers to hijack the authentication of privileged users for requests that process XACML requests via an entitlement/eval-policy-submit.jsp request.

8.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.2%