CVE-2013-3472
Cisco Unified Communications Manager - Cross-Site Request Forgery in Enterprise License Manager
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in the Enterprise License Manager (ELM) in Cisco Unified Communications Manager (CM) allows remote attackers to hijack the authentication of arbitrary users for requests that make ELM modifications, aka Bug ID CSCui58210.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1028963
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3472
Scores
EPSS
0.0071
EPSS Percentile
49.1%
Details
CWE
CWE-352
Status
published
Products (1)
cisco/unified_communications_manager
Published
Aug 29, 2013
Tracked Since
Feb 18, 2026