EUVD-2016-0412

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

IBM WebSphere Application Server mishandles CSRFtoken cookies, risking sensitive information exposure.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: Vulnerability in IBM WebSphere Application Server affects IBM Spectrum Control (formerly Tivoli Storage Productivity Center) CVE-2016-0377	22 Feb 202219:50	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in WebSphere Application Server affects multiple IBM Rational products based on IBM Jazz technology (CVE-2016-0377)	28 Apr 202118:35	–	ibm
IBM Security Bulletins	Security Bulletin:Secure Console cookie, cookie has been set without the secure flag in IBM eDiscovery Manager	17 Jun 201812:17	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Enterprise Service Bus (CVE-2016-0385, CVE-2016-0377, CVE-2016-2960, CVE-2016-3092)	15 Jun 201807:06	–	ibm
IBM Security Bulletins	Security Bulletin: Information Disclosure Vulnerability in IBM WebSphere Application Server affects FastBack for Workstations Central Administration Console	17 Jun 201815:29	–	ibm
IBM Security Bulletins	Security Bulletin: Information Disclosure in IBM WebSphere Application Server in the Admin Console (CVE-2016-0377)	15 Jun 201807:05	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2016-0377)	16 Jun 201821:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring embedded WebSphere Application Server	17 Jun 201815:28	–	ibm
IBM Security Bulletins	Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Federated Identity Manager and IBM Tivoli Federated Identity Manager Business Gateway (CVE-2016-0377)	16 Jun 201821:46	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been identified in WebSphere Application Server shipped with WebSphere Remote Server (CVE-2016-3092, CVE-2016-0377, CVE-2016-0385, CVE-2016-2960)	15 Jun 201807:06	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "37bfb8c2-8827-309c-b1a1-2e31fdac94ae",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ac0fca9d-fb37-385f-89d6-235f5fd90227",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1036653
securityfocus	www.securityfocus.com/bid/92514
www-01	www.www-01.ibm.com/support/docview.wss
www-01	www.www-01.ibm.com/support/docview.wss
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

4.8Medium risk

Vulners AI Score4.8

CVSS 34.3

CVSS 24

EPSS0.00232