CVE-2015-6330 — Cross-Site Request Forgery in Cisco Prime Collaboration Assurance

CWE-352 — Cross-Site Request Forgery4 documents4 sources
Severity
6.8MEDIUMNVD
EPSS
0.1%
top 69.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Prime Collaboration Assurance
Timeline
PublishedNov 18
Latest updateMay 17

Description

Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 10.6 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus62712.

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-6rmp-3mwg-h52r: Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10↗2022-05-17
▶
CVEList
CVE-2015-6330: Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10↗2015-11-18
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability↗2015-11-16
▶
CVE-2015-6330 — Cross-Site Request Forgery in Cisco | cvebase