CVE-2015-4298
Severity Score
6.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated users to read or write to stored data via unspecified vectors, aka Bug ID CSCuo89056.
Vulnerabilidad en Cisco Unified Web y E-Mail Interaction Manager 9.0(2) y 11.0(1) no realiza la autorización adecuadamente, lo que permite a usuarios remotos autenticados leer o escribir en los datos almacenados a través de vectores no especificados, también conocida como Bug ID CSCuo89056.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-06-04 CVE Reserved
- 2015-08-19 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-284: Improper Access Control
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/76348 | Third Party Advisory | |
| http://www.securitytracker.com/id/1033286 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/viewAlert.x?alertId=40428 | 2016-12-28 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Unified Web And E-mail Interaction Manager Search vendor "Cisco" for product "Unified Web And E-mail Interaction Manager" | 9.0\(2\) Search vendor "Cisco" for product "Unified Web And E-mail Interaction Manager" and version "9.0\(2\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Web And E-mail Interaction Manager Search vendor "Cisco" for product "Unified Web And E-mail Interaction Manager" | 11.0\(1\) Search vendor "Cisco" for product "Unified Web And E-mail Interaction Manager" and version "11.0\(1\)" | - |
Affected
| ||||||