Unrated severityNVD Advisory· Published Jul 15, 2015· Updated May 6, 2026
CVE-2015-4267
CVE-2015-4267
Description
Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2(0.793), 1.3(0.876), 1.4(0.109), 2.0(0.147), and 2.0(0.169) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus09940.
Affected products
6cpe:2.3:a:cisco:identity_services_engine_software:1.2\(0.793\):*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:cisco:identity_services_engine_software:1.2\(0.793\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.3\(0.876\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.4\(0.181\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:1.4\(0.876\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:2.0\(0.147\):*:*:*:*:*:*:*
- cpe:2.3:a:cisco:identity_services_engine_software:2.0\(0.169\):*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- tools.cisco.com/security/center/viewAlert.xnvdVendor Advisory
- www.securitytracker.com/id/1032929nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.