CVE-2010-3271: IBM WebSphere Application Server

Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Multiple cross-site request forgery (CSRF) vulnerabilities in the Integrated Solutions Console (aka administrative console) in IBM WebSphere Application Server (WAS) 7.0.0.13 and earlier allow remote attackers to hijack the authentication of administrators for requests that disable certain security options via an Edit action to console/adminSecurityDetail.do followed by a save action to console/syncworkspace.do.

Affected products

• IBM WebSphere Application Server: up to and including 7.0.0.13; version 2.0 only; version 3.0 only; version 3.0.2 only; version 3.0.2.1 only; version 3.0.2.2 only; …

Published 2011-07-18. Last modified 2026-06-16.