CVE-2016-9010

MEDIUM

IBM WebSphere Message Broker <10.0 - CSRF

Title source: llm

Description

IBM WebSphere Message Broker 9.0 and 10.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the victim. IBM Reference #: 1997906.

References (2)

[Patch, Vendor Advisory] http://www.ibm.com/support/docview.wss?uid=swg21997906

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96279

Scores

CVSS v3 6.1

EPSS 0.0019

EPSS Percentile 40.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Classification

CWE

CWE-254

Status published

Affected Products (8)

ibm/integration_bus

ibm/websphere_message_broker

IBM Corporation/Integration Bus < 9.0.0.0

IBM Corporation/Integration Bus < 9.0

IBM Corporation/Integration Bus < 10

IBM Corporation/Integration Bus < 10.0

IBM Corporation/Integration Bus < 9

Timeline

Published Feb 15, 2017

Tracked Since Feb 18, 2026