{"id":"CVE-2010-0785","aliases":["EUVD-2010-0811","GHSA-5m6g-hph9-86rj"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere...","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","severity":{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00856,"percentile":0.58664,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2010-11-09T20:00:00Z","modified":"2026-06-16T23:16:50Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM18909","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://secunia.com/advisories/41722","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27004980","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2010/2595","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/62949","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg27014463","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM23874","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://www.securityfocus.com/bid/43875","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0785"},{"url":"https://github.com/advisories/GHSA-5m6g-hph9-86rj"}],"sources":{"cve":[{"id":"CVE-2010-0785","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2010-11-09T20:00:00Z","modified":"2024-08-07T00:59:39.145Z","updated_at":"2026-11-02T14:33:29.990758Z"}],"euvd":[{"id":"EUVD-2010-0811","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2010-11-09T20:00:00Z","modified":"2024-08-07T00:59:39Z","updated_at":"2026-11-03T01:39:44.13762Z"}],"ghsa":[{"id":"GHSA-5m6g-hph9-86rj","title":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere...","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2022-05-02T06:15:35Z","modified":"2023-02-01T05:00:41Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:49:34.840834Z"}],"nvd":[{"id":"CVE-2010-0785","description":"Cross-site request forgery (CSRF) vulnerability in the Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.35 and 7.0 before 7.0.0.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.","status":"published","published":"2010-11-09T21:00:02.787Z","modified":"2026-06-16T23:16:50.327Z","cvss":[{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:01:57.065463Z"}]}}