VulnerabilityModified
CVE-2014-3305
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.
MEDIUM 6.8EPSS 1.27%
Does this matter?
Lower severity and a low EPSS score (1.27%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.27% probability · 68th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- cisco/webex meetings server
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35051Vendor Advisory
- http://www.securityfocus.com/bid/68903Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030644Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94894
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=35051Vendor Advisory
- http://www.securityfocus.com/bid/68903Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1030644Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94894
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.