Lucene search
CiscoCVE-2015-0735HistoryMay 17, 2015 - 1:59 a.m.
CVE-2015-0735
2015-05-1701:59:01
CWE-352
cisco
web.nvd.nist.gov
31
cve-2015-0735
csrf
cisco
cvp
vulnerability
nvd
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Customer Voice Portal (CVP) 10.5(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut93970.
Affected configurations
Node
ciscounified_customer_voice_portalMatch10.5\(1\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | unified_customer_voice_portal | 10.5(1) | cpe:2.3:a:cisco:unified_customer_voice_portal:10.5\(1\):*:*:*:*:*:*:* |
Related
prion
prion
Cross site request forgery (csrf)
2015-05-17 01:59:00
cisco
cisco
Cisco Unified Customer Voice Portal Cross-Site Request Forgery Vulnerability
2015-05-15 13:16:09
cvelist
cvelist
CVE-2015-0735
2015-05-17 01:00:00
nvd
nvd
CVE-2015-0735
2015-05-17 01:59:01
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.4
Confidence
Low
EPSS
0.001
Percentile
32.7%
Related for CVE-2015-0735