CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6545

Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.059

EPSS Ranking 90.2%

CVSS Severity

CVSS v2 Score 6.8

References

Products affected by CVE-2015-6545

Webgroupmedia » Cerb » Version: 6.0

cpe:2.3:a:webgroupmedia:cerb:6.0
Webgroupmedia » Cerb » Version: 6.1

cpe:2.3:a:webgroupmedia:cerb:6.1
Webgroupmedia » Cerb » Version: 6.2

cpe:2.3:a:webgroupmedia:cerb:6.2
Webgroupmedia » Cerb » Version: 6.3

cpe:2.3:a:webgroupmedia:cerb:6.3
Webgroupmedia » Cerb » Version: 6.4

cpe:2.3:a:webgroupmedia:cerb:6.4
Webgroupmedia » Cerb » Version: 6.5

cpe:2.3:a:webgroupmedia:cerb:6.5
Webgroupmedia » Cerb » Version: 6.6

cpe:2.3:a:webgroupmedia:cerb:6.6
Webgroupmedia » Cerb » Version: 6.7

cpe:2.3:a:webgroupmedia:cerb:6.7
Webgroupmedia » Cerb » Version: 6.8

cpe:2.3:a:webgroupmedia:cerb:6.8
Webgroupmedia » Cerb » Version: 6.9

cpe:2.3:a:webgroupmedia:cerb:6.9
Webgroupmedia » Cerb » Version: 7.0

cpe:2.3:a:webgroupmedia:cerb:7.0
Webgroupmedia » Cerb » Version: 7.0.1

cpe:2.3:a:webgroupmedia:cerb:7.0.1
Webgroupmedia » Cerb » Version: 7.0.2

cpe:2.3:a:webgroupmedia:cerb:7.0.2
Webgroupmedia » Cerb » Version: 7.0.3

cpe:2.3:a:webgroupmedia:cerb:7.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6545

Products

Pricing

Contact Us