NVD

Id
24204  
Name
CVE-2015-2026  
Description
Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-03  
Modified Date
2015-10-05  
Seq
2015-2026  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128211 24204 CVE-2015-2026 PI44098  View
128212 24204 CVE-2015-2026 PI44105  View
128213 24204 CVE-2015-2026 http://www-01.ibm.com/support/docview.wss?uid=swg21966044  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9748 JVNDB-2015-005068 IBM WebSphere eXtreme Scale におけるクロスサイトリクエストフォージェリの脆弱性 IBM WebSphere eXtreme Scale には、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2015-2026 79251 CVE-2015-2026 24204 6 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005068.html 2015-09-04 2015-10-07 View