CVE-2015-4274
Cisco Unified Intelligence Center 10.0(1) and 10.6(1) - Cross-Site Request Forgery
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Unified Intelligence Center 10.0(1) and 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuu94862 and CSCuu97936.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1032962
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39920
Scores
EPSS
0.0082
EPSS Percentile
53.0%
Details
CWE
CWE-352
Status
published
Products (2)
cisco/unified_intelligence_center
10.0\(1\)
cisco/unified_intelligence_center
10.6\(1\)
Published
Jul 16, 2015
Tracked Since
Feb 18, 2026