CWE-352

Medium likelihood

Cross-Site Request Forgery (CSRF)

Parent: CWE-345 - Insufficient Verification of Data Authenticity

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

9,385 vulnerabilities with CWE-352
CVE-2015-6262
Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) - Cross-Site Request Forgery
CVE-2015-6660
Drupal 6.x < 6.37 and 7.x < 7.39 - Cross-Site Request Forgery via File Upload Value Callbacks
CVE-2015-2905
Actiontec GT784WN <NCS01-1.0.13 - CSRF
CVE-2015-2983
PHP Kobo Photo Gallery CMS <1.0.1 - CSRF
CVE-2015-4530
EMC Documentum WebTop < 6.8P01, Documentum Administrator <= 7.2 - Cross-Site Request Forgery
CVE-2015-0542
EMC RSA Archer GRC 5.5 SP1 - Cross-Site Request Forgery
CVE-2015-6523
Portfolio < 1.05 - Cross-Site Request Forgery via Instagram-Portfolio Admin Page
CVE-2015-6517
phpliteadmin 1.1 - Cross-Site Request Forgery via droptable Parameter
CVE-2015-5508
eXtensible Catalog Drupal Toolkit - Cross-Site Request Forgery in XC NCIP Provider Module
CVE-2015-2848
Honeywell Tuxedo Touch < 5.1.13.0_va - Cross-Site Request Forgery
CVE-2015-4281
Cisco WebEx Meetings Server 2.5 MR1 - Cross-Site Request Forgery
CVE-2015-2134
HP System Management Homepage < 7.4.0 - Authenticated Cross-Site Request Forgery
CVE-2015-4460
c2box < 4.0.0 - Cross-Site Request Forgery in UserManagement.aspx
CVE-2015-4274
Cisco Unified Intelligence Center 10.0(1) and 10.6(1) - Cross-Site Request Forgery
CVE-2015-5530
Free Reprintables ArticleFR 3.0.6 - CSRF
CVE-2015-4267
Cisco Identity Services Engine Cross-Site Request Forgery
CVE-2015-5397
Joomla! 3.2.0-3.3.x and 3.4.x < 3.4.2 - Cross-Site Request Forgery
CVE-2015-4254
Cisco TelePresence Advanced Media Gateway 1.1(1.40) - Cross-Site Request Forgery
CVE-2015-4258
Cisco TelePresence MSE 8000 Series - Cross-Site Request Forgery
CVE-2015-4257
Cisco TelePresence MCU 4500 4.5(1.55) - Cross-Site Request Forgery
CVE-2015-4256
Cisco TelePresence IP VCR 3.0(1.27) - Cross-Site Request Forgery
CVE-2015-4255
Cisco TelePresence IP Gateway 2.0(3.34) - Cross-Site Request Forgery
CVE-2015-4253
Cisco TelePresence Serial Gateway 1.0(1.42) - Cross-Site Request Forgery
CVE-2015-4252
Cisco TelePresence ISDN Gateway 2.2(1.106) - Cross-Site Request Forgery
CVE-2015-4242
Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 - Cross-Site Request Forgery
Details
Vulnerabilities 9,385
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits