VulnerabilityModified

CVE-2014-2186

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.

MEDIUM 6.8EPSS 0.57%

Does this matter?

Lower severity and a low EPSS score (0.57%). Track it; it rarely justifies an emergency change on its own.

Description

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj81777.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 0.57% probability · 45th percentile
CISA KEV: Not listed
Weakness: CWE-352
Affected: cisco/webex meetings server
Source: psirt@cisco.com

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2186Vendor Advisory
http://www.securitytracker.com/id/1030173
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-2186Vendor Advisory
http://www.securitytracker.com/id/1030173

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.