Vulnerability Details CVE-2013-3395
Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 32.5%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2013-3395
-
cpe:2.3:h:cisco:content_security_management_appliance:-
-
cpe:2.3:h:cisco:web_security_appliance:-
-
cpe:2.3:o:cisco:email_security_appliance_firmware:-