VYPR
← All advisories
High severity8.8NVD Advisory· Published Mar 12, 2016· Updated Jun 17, 2026

CVE-2015-7446

CVE-2015-7446

Description

Cross-site request forgery (CSRF) vulnerability in IBM Flash System V9000 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, and 7.6 before 7.6.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • IBM/Flashsystem V9000 Firmware3 versions
    cpe:2.3:o:ibm:flashsystem_v9000_firmware:7.4:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:ibm:flashsystem_v9000_firmware:7.4:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:flashsystem_v9000_firmware:7.5:*:*:*:*:*:*:*
    • cpe:2.3:o:ibm:flashsystem_v9000_firmware:7.6:*:*:*:*:*:*:*
  • IBM/Flash System V9000llm-create
    Range: 7.4 before 7.4.1.4, 7.5 before 7.5.1.3, 7.6 before 7.6.0.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.