CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3267

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make unspecified changes, aka Bug ID CSCuo46427.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.6%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2014-3267

Cisco » Security Manager » Version: N/A

cpe:2.3:a:cisco:security_manager:-
Cisco » Security Manager » Version: 3.0.2

cpe:2.3:a:cisco:security_manager:3.0.2
Cisco » Security Manager » Version: 3.1

cpe:2.3:a:cisco:security_manager:3.1
Cisco » Security Manager » Version: 3.1.1

cpe:2.3:a:cisco:security_manager:3.1.1
Cisco » Security Manager » Version: 3.2

cpe:2.3:a:cisco:security_manager:3.2
Cisco » Security Manager » Version: 3.2.1

cpe:2.3:a:cisco:security_manager:3.2.1
Cisco » Security Manager » Version: 3.2.2

cpe:2.3:a:cisco:security_manager:3.2.2
Cisco » Security Manager » Version: 3.3

cpe:2.3:a:cisco:security_manager:3.3
Cisco » Security Manager » Version: 3.3.1

cpe:2.3:a:cisco:security_manager:3.3.1
Cisco » Security Manager » Version: 4.0

cpe:2.3:a:cisco:security_manager:4.0
Cisco » Security Manager » Version: 4.0.1

cpe:2.3:a:cisco:security_manager:4.0.1
Cisco » Security Manager » Version: 4.1

cpe:2.3:a:cisco:security_manager:4.1
Cisco » Security Manager » Version: 4.2

cpe:2.3:a:cisco:security_manager:4.2
Cisco » Security Manager » Version: 4.3

cpe:2.3:a:cisco:security_manager:4.3
Cisco » Security Manager » Version: 4.4

cpe:2.3:a:cisco:security_manager:4.4
Cisco » Security Manager » Version: 4.5

cpe:2.3:a:cisco:security_manager:4.5
Cisco » Security Manager » Version: 4.6

cpe:2.3:a:cisco:security_manager:4.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3267

Products

Pricing

Contact Us