Unrated severityNVD Advisory· Published Jul 2, 2013· Updated Jun 16, 2026

CVE-2013-3395

Description

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Content Security Management Appliance2 versions
cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*
- (no CPE)
Cisco Systems, Inc./Web Security Appliance2 versions
cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:h:cisco:web_security_appliance:-:*:*:*:*:*:*:*
- (no CPE)
Cisco Systems, Inc./Email Security Appliance Firmware2 versions
cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:email_security_appliance_firmware:-:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3395nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000