VULNERABILITY INTELLIGENCE

CVE-2015-0116

CVSS score3.5 LOW
EPSS probability0.82%
CISA KEVNot currently listed
Published2015-06-28
Last modified2026-06-17
CVSS vectorAV:N/AC:M/Au:S/C:N/I:P/A:N

Description

IBM Leads 7.x, 8.1.0 before 8.1.0.14, 8.2, 8.5.0 before 8.5.0.7.3, 8.6.0 before 8.6.0.8.1, 9.0.0 through 9.0.0.4, 9.1.0 before 9.1.0.6.1, and 9.1.1 before 9.1.1.0.2 does not properly restrict the addition of links, which makes it easier for remote authenticated users to conduct cross-site request forgery (CSRF) attacks via unspecified vectors.

Weakness classification

  • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Primary references