{"id":"CVE-2012-3304","aliases":["EUVD-2012-3282","GHSA-8jhg-mc33-hhc5"],"status":"published","title":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0...","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02066,"percentile":0.81518,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2012-09-25T20:00:00Z","modified":"2026-06-16T23:42:57Z","products":[{"vendor":"ibm","product":"websphere_application_server"}],"references":[{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356","tags":["vendor-advisory","x_refsource_AIXAPAR","x_transferred"]},{"url":"http://osvdb.org/85733","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21611313","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/77476","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-3304"},{"url":"https://github.com/advisories/GHSA-8jhg-mc33-hhc5"}],"sources":{"cve":[{"id":"CVE-2012-3304","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","status":"published","published":"2012-09-25T20:00:00Z","modified":"2024-08-06T19:57:50.5Z","updated_at":"2026-11-02T14:34:50.94153Z"}],"euvd":[{"id":"EUVD-2012-3282","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","status":"published","published":"2012-09-25T20:00:00Z","modified":"2024-08-06T19:57:50Z","updated_at":"2026-11-03T01:56:11.327216Z"}],"ghsa":[{"id":"GHSA-8jhg-mc33-hhc5","title":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0...","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","status":"published","published":"2022-05-17T01:44:29Z","modified":"2023-02-03T05:05:24Z","updated_at":"2026-11-02T14:53:43.901857Z"}],"nvd":[{"id":"CVE-2012-3304","description":"The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.","status":"published","published":"2012-09-25T20:55:01.063Z","modified":"2026-06-16T23:42:57.743Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:16.115119Z"}]}}