CVE-2015-6405 - Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501

Back Back to CVE browser

MEDIUM

Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501

Published Dec 13, 2015

6.8

MEDIUM

CVSS 2.0

EPSS 0.98%

Description

Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuv26501.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-352

CSRF

References (3)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-cers
vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securityfocus.com/bid/78812
vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1034385
vdb-entryx_refsource_SECTRACK

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151209-cers		vendor-advisoryx_refsource_CISCOVendor Advisory
http://www.securityfocus.com/bid/78812		vdb-entryx_refsource_BID
http://www.securitytracker.com/id/1034385		vdb-entryx_refsource_SECTRACK

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Dec 13, 2015

Updated Aug 6, 2024

Reserved Aug 17, 2015

Link CVE-2015-6405

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2015-6405

Red Hat

Severity n/a

Public date n/a

Links CVE-2015-6405