CVE-2015-0704 — Cross-Site Request Forgery in Cisco Unified Meetingplace

CWE-352 — Cross-Site Request Forgery6 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
0.1%
top 71.16%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Unified Meetingplace
Timeline
PublishedApr 22
Latest updateMay 17

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-rgpp-69xw-mj7q: Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8↗2022-05-17
▶
CVEList
CVE-2015-0704: Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8↗2015-04-22
▶

📋Vendor Advisories

1
Cisco
Cisco Unified MeetingPlace Server Multiple State Changing URL API Functionalities Cross-Site Request Forgery Vulnerability↗2015-04-21
▶

💬Community

1
HackerOne
Bleichenbacher oracle in SSLv2 (CVE-2016-0704)↗2016-06-01
▶
CVE-2015-0704 — Cross-Site Request Forgery in Cisco | cvebase