CVE-2014-1473

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the "response web page."

References

https://kc.mcafee.com/corporate/index?page=content&id=SB10061

https://exchange.xforce.ibmcloud.com/vulnerabilities/90245

http://www.securitytracker.com/id/1029591

http://www.securityfocus.com/bid/64795

http://secunia.com/advisories/56394

http://osvdb.org/101939

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3