CVE-2016-5889

Published: May 10, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Interact 8.6, 9.0, 9.1, and 10.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 115085.

Affected (6)

Products: Ibm: Interact

Ibm

1 product

Interact

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Interact	Version 10.0
Ibm Interact	Version 8.6
Ibm Interact	Version 9.0
Ibm Interact	Version 9.1.1
Ibm Interact	Version 9.1.2
Ibm Interact	Version 9.1

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

http://www.ibm.com/support/docview.wss?uid=swg22002149

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.ibm.com/support/docview.wss?uid=swg22002149

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.