CVE-2013-2980

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-17 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Web Console in IBM Data Studio 3.1.0 and 3.1.1 allows remote attackers to hijack the authentication of arbitrary users for requests that access monitored database information.

Affected products

IBM Data Studio: 3.1.0, 3.1.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21638733
https://exchange.xforce.ibmcloud.com/vulnerabilities/84113
http://www-01.ibm.com/support/docview.wss?uid=swg21638733
https://exchange.xforce.ibmcloud.com/vulnerabilities/84113

Get alerted when CVE-2013-2980 or the next vulnerability affects your stack