CVE-2015-7407

8.8HIGH

Key Information:

Vendor
IBM
Status
Mashups Center
Vendor
CVE Published:
2 January 2016

Summary

Cross-site request forgery (CSRF) vulnerability in Lotus Mashups in IBM Mashup Center 3.0.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IT12268
vendor-advisoryx_refsource_AIXAPAR
http://www.securityfocus.com/bid/78455
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21970299
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.