CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2015-0700

Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.6%

CVSS Severity

CVSS v2 Score 6.8

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38403
http://www.securitytracker.com/id/1032163
http://tools.cisco.com/security/center/viewAlert.x?alertId=38403
http://www.securitytracker.com/id/1032163

Products affected by CVE-2015-0700

Cisco » Secure Access Control Server Solution Engine » Version: 5.4.0.46.6

cpe:2.3:a:cisco:secure_access_control_server_solution_engine:5.4.0.46.6
Cisco » Secure Access Control Server Solution Engine » Version: 5.5.0.36

cpe:2.3:a:cisco:secure_access_control_server_solution_engine:5.5.0.36
Cisco » Secure Access Control Server Solution Engine » Version: 5.5.0.46.4

cpe:2.3:a:cisco:secure_access_control_server_solution_engine:5.5.0.46.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-0700

Products

Pricing

Contact Us