Detections
Analytics

CVE-2014-3305

high

Description

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco WebEx Meetings Server 1.5(.1.131) and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, aka Bug ID CSCuj81735.

References

http://www.securitytracker.com/id/1030644

http://www.securityfocus.com/bid/68903

https://exchange.xforce.ibmcloud.com/vulnerabilities/94894

http://tools.cisco.com/security/center/viewAlert.x?alertId=35051

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3305

Details

Source: Mitre, NVD

Published: 2014-07-26

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.0019