Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2013/01/27 6:00 p.m.•46 views

CVE-2013-0460

Cross-site request forgery CSRF vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site...

6.2AI score0.00979EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2013/01/27 12:00 a.m.•7 views

CVE-2013-0460: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the portlet subsystem in the administrative console in IBM WebSphere Application Server WAS 6.1 before 6.1.0.47 and 7.0 before 7.0.0.27 allows remote attackers to hijack the authentication of arbitrary users for requests that insert cross-site...

6.8CVSS5.9AI score0.00979EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2013/01/27 12:00 a.m.•6 views

PT-2013-2355

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1 before 6.1.0.47 IBM WebSphere Application Server versions 7.0 before 7.0.0.27 Description A cross-site request forgery CSRF issue exists in the portlet subsystem of the administrative console,...

6.8CVSS0.00979EPSS
SaveExploits0References5
Rows per page
Query Builder