Lucene search

K
cvelistCiscoCVELIST:CVE-2013-3395
HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-3395

2022-10-0316:14:45
cisco
www.cve.org
1
cve-2013-3395
cross-site request forgery
web security appliance
email security appliance
content security management appliance
remote attackers
authentication hijacking

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

35.9%

Related for CVELIST:CVE-2013-3395