| Package | Affected versions | Patched versions |
|---|---|---|
| webfocus business intelligence | = 8.0 |
WebFOCUS Business Intelligence 8.0 (SP6) allows a Cross-Site Request Forgery (CSRF) attack against administrative users within the /ibi_apps/WFServlet(.ibfs) endpoint. The impact may be creation of an administrative user. It can also be exploited in conjunction with CVE-2016-9044.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free