Home

CVE-2015-6376

Description

Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv72412.

Risk Information

Base Score
7.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
0.116

Associated Vulnerability

VulnerabilityOS Platform
Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability For Cisco TelePresence Video Communication Server SoftwareNCM
Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-6376)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1706044Security Update for Cisco TelePresence Video Communication Server Software X8.9.2

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234