Unscored severity · published Aug 26, 2015
CVE-2015-5412
Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VC
Version Control Repository Manager · HP
through 7.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5412
www.securitytracker.com
http://www.securitytracker.com/id/1033378
Vendor Advisory
https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04765115
More from Version Control Repository Manager
9.8
CVE-2015-3113
Adobe Flash Player Heap-Based Buffer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
8.8
CVE-2016-8515
A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found
8.0
CVE-2016-8513
A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found
6.5
CVE-2017-5787
A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prior to 7.6 was found