CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2014/12/15 6:59 p.m.•19 views

CVE-2014-9385

Cross-site request forgery CSRF vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger arbitrary code execution via a ZenPack upload, aka ZEN-15388...

6.8CVSS7.8AI score0.0085EPSS

Exploits0References2

Prion•added 2014/12/15 6:59 p.m.•16 views

Cross site request forgery (csrf)

6.8CVSS8.2AI score0.0085EPSS

Exploits0References2Affected Software1

CVE•added 2014/12/15 5:27 p.m.•49 views

CVE-2014-9385

CVE-2014-9385: CSRF vulnerability in Zenoss Core up to and including 5 Beta 3 allows remote attackers to hijack user authentication and trigger arbitrary code execution via a ZenPack upload (ZEN-15388).

6.8CVSS8.1AI score0.0085EPSS

Exploits0References2Affected Software1