Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-3420
cisco
ise
csrf
vulnerability
nvd
remote attack
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.9%
Cross-site request forgery (CSRF) vulnerability in the web framework on the Cisco Identity Services Engine (ISE) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuh25506.
Affected configurations
Node
ciscoidentity_services_engine_softwareMatch-
ciscoidentity_services_engineMatch-
Related
nvd
nvd
CVE-2013-3420
2013-07-18 12:51:14
cisco
cisco
Cisco Identity Services Engine Cross-Site Request Forgery Vulnerability
2013-07-17 13:46:56
prion
prion
Cross site request forgery (csrf)
2013-07-18 12:51:00
cvelist
cvelist
CVE-2013-3420
2022-10-03 16:14:46
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
35.9%
Related for CVE-2013-3420