VULNERABILITY INTELLIGENCE

CVE-2016-0295

CVSS score8.8 HIGH

EPSS probability1.03%

CISA KEVNot currently listed

Published2018-02-28

Last modified2026-06-17

Description

Cross-site request forgery (CSRF) vulnerability in the IBM BigFix Platform 9.0, 9.1, 9.2, and 9.5 before 9.5.2 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences. IBM X-Force ID: 111363.