CVE-2015-0716

Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) - Cross-Site Request Forgery in CUCReports Page

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in the CUCReports page in Cisco Unity Connection 11.0(0.98000.225) and 11.0(0.98000.332) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut33659.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38675
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032259

Scores

EPSS 0.0082
EPSS Percentile 53.0%

Details

CWE
CWE-352
Status published
Products (2)
cisco/unity_connection 11.0\(0.98000.225\)
cisco/unity_connection 11.0\(0.98000.332\)
Published May 07, 2015
Tracked Since Feb 18, 2026