Lucene search

K
cveCiscoCVE-2015-4281
HistoryJul 22, 2015 - 2:59 p.m.

CVE-2015-4281

2015-07-2214:59:01
CWE-352
cisco
web.nvd.nist.gov
30
cve-2015-4281
cross-site request forgery
csrf
cisco webex meetings server 2.5 mr1
vulnerability
security
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

52.2%

Cross-site request forgery (CSRF) vulnerability in Cisco WebEx Meetings Server 2.5 MR1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCus56150 and CSCus56146.

Affected configurations

Nvd
Node
ciscowebex_meetings_serverMatch2.5\(1\)
VendorProductVersionCPE
ciscowebex_meetings_server2.5(1)cpe:2.3:a:cisco:webex_meetings_server:2.5\(1\):*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.002

Percentile

52.2%

Related for CVE-2015-4281