Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.x through 6.1.0.47, 7.0 before 7.0.0.35, 8.0 before 8.0.0.10, and 8.5 before 8.5.5.4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    21 Nov 2024, 02:10
| Type | Values Removed | Values Added | 
|---|---|---|
| References | () http://secunia.com/advisories/61418 - | |
| References | () http://secunia.com/advisories/61423 - | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg1PI23055 - | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21682767 - Patch, Vendor Advisory | |
| References | () http://www.kb.cert.org/vuls/id/573356 - US Government Resource | |
| References | () http://www.securityfocus.com/bid/69980 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/95402 - | 
Information
                Published : 2014-09-23 22:55
Updated : 2025-04-12 10:46
NVD link : CVE-2014-4816
Mitre link : CVE-2014-4816
CVE.ORG link : CVE-2014-4816
JSON object : View
Products Affected
                ibm
- websphere_application_server
CWE
                
                    
                        
                        CWE-352
                        
            Cross-Site Request Forgery (CSRF)
