CVE-2014-6125 | BDVDB-2026-65877 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Portal 8.5.0 before CF03 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg1PI26889
http://www-01.ibm.com/support/docview.wss?uid=swg21684651
http://www.securityfocus.com/bid/70759
https://exchange.xforce.ibmcloud.com/vulnerabilities/96782

Exploit#

No public exploit known

History#

Version 12014-10-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.