Skip to main content

Unified Intelligence Center CVE-2015-0740

MEDIUM
Cross-Site Request Forgery (CSRF) (CWE-352)
2015-05-20 psirt@cisco.com
CSRF Cisco Unified Intelligence Center
6.8
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:N/C:P/I:P/A:P
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
P

Lifecycle Timeline

1
CVE Published
May 20, 2015 - 00:59 cve.org
MEDIUM 6.8

DescriptionCVE.org

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.

AnalysisAI

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Request Forgery (CSRF) (CWE-352), which allows attackers to trick authenticated users into performing unintended actions. Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826. Affected products include: Cisco Unified Intelligence Center.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement anti-CSRF tokens, validate Origin/Referer headers, use SameSite cookie attribute.

More in Unified Intelligence Center

View all
CVE-2017-12337 CRITICAL
9.8 Nov 16

A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System softw
CVE-2017-12253 HIGH
8.8 Sep 21

A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwa
CVE-2016-6427 HIGH
8.8 Oct 06

Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as use
CVE-2016-6426 HIGH
7.5 Oct 05

The j_spring_security_switch_user function in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in

CVE-2019-1658 HIGH
7.4 Jan 24

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticate
CVE-2025-20113 HIGH
7.1 May 21

A vulnerability in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to elevate privileges
CVE-2024-20325 HIGH
7.1 Feb 21

A vulnerability in the Live Data server of Cisco Unified Intelligence Center could allow an unauthenticated, local attac
CVE-2015-4274 MEDIUM
6.8 Jul 16

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10
CVE-2023-20061 MEDIUM
6.5 Mar 03

Multiple vulnerabilities in Cisco Unified Intelligence Center could allow an authenticated, remote attacker to collect s
CVE-2017-6789 MEDIUM
6.1 Sep 07

A vulnerability in the Cisco Unified Intelligence Center web interface could allow an unauthenticated, remote attacker t
CVE-2017-12254 MEDIUM
6.1 Sep 21

A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacke
CVE-2016-6425 MEDIUM
6.1 Oct 06

Cross-site scripting (XSS) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Un

Same weakness CWE-352 – Cross-Site Request Forgery (CSRF)

View all
CVE-2016-6277 HIGH POC
8.8
CVE-2014-100005 HIGH POC
8.0
CVE-2013-5696 MEDIUM POC
6.8
CVE-2020-36836 HIGH POC
8.0
CVE-2015-2295 MEDIUM POC
6.8
CVE-2016-6897 MEDIUM POC
6.5
CVE-2022-41622 HIGH POC
8.8
CVE-2025-2907 CRITICAL POC
9.8

Same technique CSRF

View all
CVE-2016-6277 HIGH POC
8.8
CVE-2014-100005 HIGH POC
8.0
CVE-2017-9757 HIGH POC
8.8
CVE-2013-5696 MEDIUM POC
6.8
CVE-2013-4152 MEDIUM POC
6.8
CVE-2024-7094 CRITICAL
9.8
CVE-2015-4624 HIGH POC
7.5
CVE-2020-36836 HIGH POC
8.0

Share

CVE-2015-0740 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy