CVE-2016-2884
30.11.2016, 20:59
Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
| Vendor | Product | Version |
|---|---|---|
| ibm | forms_experience_builder | 8.5.0.0 |
| ibm | forms_experience_builder | 8.5.1.0 |
| ibm | forms_experience_builder | 8.5.1.1 |
| ibm | forms_experience_builder | 8.6.0.0 |
| ibm | forms_experience_builder | 8.6.1 |
| ibm | forms_experience_builder | 8.6.1.1 |
| ibm | forms_experience_builder | 8.6.2 |
| ibm | forms_experience_builder | 8.6.2.1 |
| ibm | forms_experience_builder | 8.6.3 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration