CVE-2010-3892: IBM Omnifind

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.

Affected products

• IBM Omnifind: version 8.0 only; version 8.4 only; version 8.5 only; version 9.0 only; version 9.1 only

Published 2010-11-12. Last modified 2026-06-16.