CVE-2015-7446

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-03-12 · updated 2026-06-17
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected products

IBM Flashsystem V9000 Firmware: 7.4, 7.5, 7.6

References

http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005570
http://www-01.ibm.com/support/docview.wss?uid=ssg1S1005570

Get alerted when CVE-2015-7446 or the next vulnerability affects your stack