Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-3004

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.0 through CR4, 4.5 through CR5, and 5.0 before CR4 allows remote authenticated users to hijack the authentication of arbitrary users for requests that modify the set of available applications.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.0%
CVSS Severity
CVSS v3 Score 4.6
CVSS v2 Score 4.9
Products affected by CVE-2016-3004
  • Ibm » Connections » Version: 4.0.0.0
    cpe:2.3:a:ibm:connections:4.0.0.0
  • Ibm » Connections » Version: 4.5.0.0
    cpe:2.3:a:ibm:connections:4.5.0.0
  • Ibm » Connections » Version: 5.0.0.0
    cpe:2.3:a:ibm:connections:5.0.0.0


Contact Us

Shodan ® - All rights reserved