AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-7034

HIGH · CVSS 8.8 EPSS 1.13%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-09-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2016-7034
Severity
HIGH
CVSS
8.8
EPSS
1.13%

Original NVD Description

The dashbuilder in Red Hat JBoss BPM Suite 6.3.2 does not properly handle CSRF tokens generated during an active session and includes them in query strings, which makes easier for remote attackers to (1) bypass CSRF protection mechanisms or (2) conduct cross-site request forgery (CSRF) attacks by obtaining an old token.