CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0056

Cross-site request forgery (CSRF) vulnerability in the administration interface in Cisco IronPort Encryption Appliance 6.2.4 before 6.2.4.1.1, 6.2.5, 6.2.6, 6.2.7 before 6.2.7.7, 6.3 before 6.3.0.4, and 6.5 before 6.5.0.2; and Cisco IronPort PostX 6.2.1 before 6.2.1.1 and 6.2.2 before 6.2.2.3; allows remote attackers to execute commands and modify appliance preferences as arbitrary users via a logout action.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 45.3%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2009-0056

Cisco » Ironport Encryption Appliance » Version: 6.2.4

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4
Cisco » Ironport Encryption Appliance » Version: 6.2.4.1

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1
Cisco » Ironport Encryption Appliance » Version: 6.2.5

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5
Cisco » Ironport Encryption Appliance » Version: 6.2.6

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6
Cisco » Ironport Encryption Appliance » Version: 6.2.7

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7
Cisco » Ironport Encryption Appliance » Version: 6.2.7.1

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1
Cisco » Ironport Encryption Appliance » Version: 6.2.7.2

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2
Cisco » Ironport Encryption Appliance » Version: 6.2.7.3

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3
Cisco » Ironport Encryption Appliance » Version: 6.2.7.4

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4
Cisco » Ironport Encryption Appliance » Version: 6.2.7.5

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5
Cisco » Ironport Encryption Appliance » Version: 6.2.7.6

cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6
Cisco » Ironport Encryption Appliance » Version: 6.3

cpe:2.3:h:cisco:ironport_encryption_appliance:6.3
Cisco » Ironport Encryption Appliance » Version: 6.3.0.1

cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.1
Cisco » Ironport Encryption Appliance » Version: 6.3.0.2

cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.2
Cisco » Ironport Encryption Appliance » Version: 6.3.0.3

cpe:2.3:h:cisco:ironport_encryption_appliance:6.3.0.3
Cisco » Ironport Encryption Appliance » Version: 6.5

cpe:2.3:h:cisco:ironport_encryption_appliance:6.5
Cisco » Ironport Encryption Appliance » Version: 6.5.0.1

cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1
Cisco » Ironport Postx » Version: 6.2.1

cpe:2.3:h:cisco:ironport_postx:6.2.1
Cisco » Ironport Postx » Version: 6.2.2

cpe:2.3:h:cisco:ironport_postx:6.2.2
Cisco » Ironport Postx » Version: 6.2.2.1

cpe:2.3:h:cisco:ironport_postx:6.2.2.1
Cisco » Ironport Postx » Version: 6.2.2.2

cpe:2.3:h:cisco:ironport_postx:6.2.2.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-0056

Products

Pricing

Contact Us