NVD

Id
35250  
Name
CVE-2014-7996  
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-11-18  
Modified Date
2017-01-06  
Seq
2014-7996  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
180528 35250 CVE-2014-7996 20141118 Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability  View
180529 35250 CVE-2014-7996 http://tools.cisco.com/security/center/viewAlert.x?alertId=36456  View
180530 35250 CVE-2014-7996 71171  View
180531 35250 CVE-2014-7996 cisco-imc-cve20147996-csrf(98769)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16663 JVNDB-2014-005538 Cisco Unified Computing System の Cisco Integrated Management Controller の Web フレームワークにおけるクロスサイトリクエストフォージェリの脆弱性 Cisco Unified Computing System の Cisco Integrated Management Controller の Web フレームワークには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2014-7996 75289 CVE-2014-7996 35250 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005538.html 2014-11-18 2014-11-20 View