VulnerabilityModified
CVE-2014-7996
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.
MEDIUM 6.8EPSS 0.64%
Does this matter?
Lower severity and a low EPSS score (0.64%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 0.64% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-352
- Affected
- cisco/unified computing system
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/62565
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36456Vendor Advisory
- http://www.securityfocus.com/bid/71171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98769
- http://secunia.com/advisories/62565
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-7996Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=36456Vendor Advisory
- http://www.securityfocus.com/bid/71171
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98769
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.