Unscored severity · published May 20, 2015
CVE-2015-0740
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center 10.6(1) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus28826.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UI
Unified Intelligence Center · Cisco
10.6(1) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-0740
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-0740
Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=38913
Third Party Advisory
http://www.securityfocus.com/bid/74732
Third Party Advisory
http://www.securitytracker.com/id/1032367
More from Unified Intelligence Center
9.8
CVE-2017-12337
A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could allow an unauthenticated, remote…
8.8
CVE-2025-20274
Cisco Unified Intelligence Center Arbitrary File Upload Vulnerability
8.8
CVE-2017-12253
A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions
8.8
CVE-2016-6427
Cross-site request forgery (CSRF) vulnerability in Cisco Unified Intelligence Center (CUIC) 8.5.4 through 9.1(1), as used in Unified Contact Center Express 10.0(1) through…
7.5
CVE-2017-6779
Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,…