CVE-2016-9714

CWE-352 — Cross-Site Request Forgery (CSRF)3 documents3 sources
Severity
8.8HIGH
EPSS
0.1%
top 67.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Infosphere Master Data ManagementIBM Infosphere Master Data Management Server
Timeline
PublishedJul 31
Latest updateMay 17

Description

IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 119727.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-w5c2-3j38-vgp4: IBM InfoSphere Master Data Management Server 10↗2022-05-17
▶
CVEList
CVE-2016-9714: IBM InfoSphere Master Data Management Server 10↗2017-07-31
▶
CVE-2016-9714 (HIGH CVSS 8.8) | IBM InfoSphere Master Data Manageme | cvebase.io