Lucene search

K
cveCiscoCVE-2015-0740
HistoryMay 20, 2015 - 12:59 a.m.

CVE-2015-0740

2015-05-2000:59:00
CWE-352
cisco
web.nvd.nist.gov
38
cve-2015-0740
csrf
vulnerability
cisco unified intelligence center
bug id cscus28826
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

57.5%

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.

Affected configurations

Nvd
Node
ciscounified_intelligence_centerMatch10.6\(1\)
VendorProductVersionCPE
ciscounified_intelligence_center10.6(1)cpe:2.3:o:cisco:unified_intelligence_center:10.6\(1\):*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

57.5%

Related for CVE-2015-0740