CVE-2015-0705

MEDIO 6.8CVE-2015-0705 · Published 22/04/2015 · updated 17/06/2026

In breve

CVE-2015-0705 è una vulnerabilità MEDIO (CVSS 6.8) che riguarda unified meetingplace (cisco).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
unified meetingplace cisco	`= 8.6(1.9)`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494.

References

tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/74258 · Third Party Advisory
securitytracker.com/id/1032335 · Third Party Advisory
h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay · Third Party Advisory

Altre vulnerabilità di unified meetingplace

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified meetingplace

cisco

= 8.6(1.9)

No fix yet

Altre vulnerabilità di unified meetingplace

Vedi tutto →