CVE-2016-2884

Published: Nov 30, 2016Modified: May 6, 2026

8.0

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in IBM Forms Experience Builder 8.5.x and 8.6.x before 8.6.3.1, in an unspecified non-default configuration, allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected (9)

Products: Ibm: Forms Experience Builder

Ibm

1 product

Forms Experience Builder

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Forms Experience Builder	Version 8.5.0.0
Ibm Forms Experience Builder	Version 8.5.1.0
Ibm Forms Experience Builder	Version 8.5.1.1
Ibm Forms Experience Builder	Version 8.6.0.0
Ibm Forms Experience Builder	Version 8.6.1.1
Ibm Forms Experience Builder	Version 8.6.1
Ibm Forms Experience Builder	Version 8.6.2.1
Ibm Forms Experience Builder	Version 8.6.2
Ibm Forms Experience Builder	Version 8.6.3