Unrated severityNVD Advisory· Published Jul 1, 2014· Updated Jun 17, 2026

CVE-2014-2509

Description

Session fixation vulnerability in the Report Advisor (RA) component in EMC Network Configuration Manager (NCM) before 9.3 allows remote attackers to hijack web sessions via a session cookie.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

EMC Corporation/Smarts Network Configuration Manager2 versions
cpe:2.3:a:emc:smarts_network_configuration_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:emc:smarts_network_configuration_manager:*:*:*:*:*:*:*:*range: <=9.2
- cpe:2.3:a:emc:smarts_network_configuration_manager:9.1:*:*:*:*:*:*:*
SolarWinds/Network Configuration Managerllm-fuzzy
Range: <9.3

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2014-06/0168.htmlnvd
packetstormsecurity.com/files/127301/EMC-Network-Configuration-Manager-NCM-Session-Fixation.htmlnvd
secunia.com/advisories/59423nvd
www.securityfocus.com/archive/1/533077/100/0/threadednvd
www.securitytracker.com/id/1030494nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000