CVE-2014-2115

Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250.

Severity	MEDIUM
CVSS	6.8
CWE	CWE-352
KEV
Published	12 years ago
Modified	1 week ago

Related Products

Product	Advisory
Cisco RV Series Routers	Cisco-SA-20140403-CVE-2014-2115
Cisco Nexus Dashboard	Cisco-SA-20140403-CVE-2014-2115
Cisco Catalyst PON Series Switches	Cisco-SA-20140403-CVE-2014-2115
Cisco Emergency Responder	Cisco-SA-20140403-CVE-2014-2115