CVE-2012-3304

critical

Description

The Administrative Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.45, 7.0 before 7.0.0.25, 8.0 before 8.0.0.5, and 8.5 before 8.5.0.1 allows remote attackers to hijack sessions via unspecified vectors.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/77476

https://euvd.enisa.europa.eu/vulnerability/EUVD-2012-3282

http://www.ibm.com/support/docview.wss?uid=swg21611313

http://www-01.ibm.com/support/docview.wss?uid=swg1PM54356

http://osvdb.org/85733

Details

Source: Mitre, NVD

Published: 2012-09-25

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.02066

Detections

Analytics