VulnerabilityModified

CVE-2015-5412

Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

MEDIUM 6.0EPSS 0.87%

Does this matter?

Lower severity and a low EPSS score (0.87%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.0 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:P
EPSS: 0.87% probability · 57th percentile
CISA KEV: Not listed
Weakness: CWE-352
Affected: hp/version control repository manager
Source: hp-security-alert@hp.com

References

http://www.securitytracker.com/id/1033378
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04765115Vendor Advisory
http://www.securitytracker.com/id/1033378
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04765115Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.