CVE-2015-6376
Cisco TelePresence Video Communication Server X8.5.1 - Cross-Site Request Forgery
Title source: llmDescription
Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151120-tvcs
Scores
EPSS
0.0059
EPSS Percentile
43.9%
Details
CWE
CWE-352
Status
published
Products (1)
cisco/telepresence_video_communication_server_software
x8.5.1
Published
Nov 21, 2015
Tracked Since
Feb 18, 2026