VULNERABILITY INTELLIGENCE

CVE-2015-1894

CVSS score6.8 MEDIUM

EPSS probability0.70%

CISA KEVNot currently listed

Published2015-05-25

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Optim Workload Replay 2.x before 2.1.0.3 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Weakness classification

CWE-352: Cross-Site Request Forgery (CSRF)

Primary references

psirt@us.ibm.com — Patch, Vendor Advisory
psirt@us.ibm.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry