VULNERABILITY INTELLIGENCE

CVE-2007-5799

CVSS score4.3 MEDIUM
EPSS probability0.61%
CISA KEVNot currently listed
Published2007-11-03
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (WAS) before 6.1.0 Fix Pack 13 (6.1.0.13) allow remote attackers to perform some actions as WAS UDDI users via the (1) keyField, (2) nameField, (3) valueField, and (4) frameReturn parameters.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references