Lucene search
CiscoCVE-2014-7996HistoryNov 18, 2014 - 11:59 p.m.
CVE-2014-7996
2014-11-1823:59:04
CWE-352
cisco
web.nvd.nist.gov
24
cisco
cve-2014-7996
csrf
vulnerability
web framework
cisco integrated management controller
unified computing system
bug id cscuq45477
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.002
Percentile
58.4%
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.
Affected configurations
Node
ciscounified_computing_systemMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_computing_system | - | cpe:2.3:h:cisco:unified_computing_system:-:*:*:*:*:*:*:* |
Related
nessus
nessus
cisco
cisco
Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability
2014-11-18 19:20:10
cvelist
cvelist
CVE-2014-7996
2014-11-18 23:00:00
nvd
nvd
CVE-2014-7996
2014-11-18 23:59:04
prion
prion
Cross site request forgery (csrf)
2014-11-18 23:59:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.002
Percentile
58.4%
Related for CVE-2014-7996