ByteOS

HP DeskJet 3630 All-in-One Printer series

Product

Versions

Affected

F5S43A - F5S57A
K4T93A - K4T99C
K4U00B - K4U03B
V3F21A - V3F22A

Problem Types

Type	CWE ID	Description
text	N/A	Cross-Site Request Forgery in HP DeskJet 3630 Printers

Type: text

CWE ID: N/A

Description: Cross-Site Request Forgery in HP DeskJet 3630 Printers

References

Hyperlink	Resource
https://support.hp.com/us-en/document/c06308143	x_refsource_CONFIRM

Hyperlink: https://support.hp.com/us-en/document/c06308143

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.hp.com/us-en/document/c06308143	x_refsource_CONFIRM x_transferred

Hyperlink: https://support.hp.com/us-en/document/c06308143

Resource:

x_refsource_CONFIRM

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:hp-security-alert@hp.com

Published At:09 Jan, 2020 | 20:15

Updated At:22 Jan, 2020 | 18:29

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Primary	2.0	5.8	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.1

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Type: Primary

Version: 2.0

Base score: 5.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:P

CPE Matches

cpe:2.3:o:hp:deskjet_3630_f5s43a_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_f5s43a_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_f5s43a:-:*:*:*:*:*:*:*

>>deskjet_3630_f5s43a>>-

cpe:2.3:o:hp:deskjet_3630_f5s57a_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_f5s57a_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_f5s57a:-:*:*:*:*:*:*:*

>>deskjet_3630_f5s57a>>-

cpe:2.3:o:hp:deskjet_3630_k4t93a_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_k4t93a_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_k4t93a:-:*:*:*:*:*:*:*

>>deskjet_3630_k4t93a>>-

cpe:2.3:o:hp:deskjet_3630_k4t99c_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_k4t99c_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_k4t99c:-:*:*:*:*:*:*:*

>>deskjet_3630_k4t99c>>-

cpe:2.3:o:hp:deskjet_3630_k4u00b_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_k4u00b_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_k4u00b:-:*:*:*:*:*:*:*

>>deskjet_3630_k4u00b>>-

cpe:2.3:o:hp:deskjet_3630_k4u03b_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_k4u03b_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_k4u03b:-:*:*:*:*:*:*:*

>>deskjet_3630_k4u03b>>-

cpe:2.3:o:hp:deskjet_3630_v3f21a_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_v3f21a_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_v3f21a:-:*:*:*:*:*:*:*

>>deskjet_3630_v3f21a>>-

cpe:2.3:o:hp:deskjet_3630_v3f22a_firmware:*:*:*:*:*:*:*:*

>>deskjet_3630_v3f22a_firmware>>Versions before swp1fn1912br(exclusive)

cpe:2.3:h:hp:deskjet_3630_v3f22a:-:*:*:*:*:*:*:*

>>deskjet_3630_v3f22a>>-

Weaknesses

CWE ID	Type	Source
CWE-352	Primary	nvd@nist.gov

CWE ID: CWE-352

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://support.hp.com/us-en/document/c06308143	hp-security-alert@hp.com	Vendor Advisory

Hyperlink: https://support.hp.com/us-en/document/c06308143

Source: hp-security-alert@hp.com

Resource:

Vendor Advisory

Similar CVEs

200Records found

CVE-2019-6320

Matching Score-10

Assigner-HP Inc.

Product-deskjet_3630_v3f21a_firmware deskjet_3630_f5s43a deskjet_3630_v3f21a deskjet_3630_f5s43a_firmware deskjet_3630_k4t99c_firmware deskjet_3630_k4u00b_firmware deskjet_3630_k4u03b_firmware deskjet_3630_k4t99c deskjet_3630_v3f22a_firmware deskjet_3630_k4t93a deskjet_3630_k4u00b deskjet_3630_k4u03b deskjet_3630_f5s57a_firmware deskjet_3630_k4t93a_firmware deskjet_3630_v3f22a deskjet_3630_f5s57a HP DeskJet 3630 All-in-One Printer series

Matching Score-10

Assigner-HP Inc.

CVSS Score-8.1||HIGH

EPSS-0.15% / 36.88%

7 Day CHG~0.00%

Published-09 Jan, 2020 | 18:59

Updated-04 Aug, 2024 | 20:16

Certain HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A (firmware version SWP1FN1912BR or higher) have a Cross-Site Request Forgery (CSRF) vulnerability that could lead to a denial of service (DOS) or device misconfiguration.

Vendor-HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2016-4394

Matching Score-8

Matching Score-8

CVSS Score-6.5||MEDIUM

EPSS-0.48% / 64.34%

7 Day CHG~0.00%

Published-28 Oct, 2016 | 21:00

Updated-12 Apr, 2025 | 10:46

HPE System Management Homepage before v7.6 allows remote attackers to obtain sensitive information via unspecified vectors, related to an "HSTS" issue.

Vendor-Hewlett Packard Enterprise (HPE)HP Inc.

Product-system_management_homepage HPE System Management Homepage before v7.6

CVE-2018-2599

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.8||MEDIUM

EPSS-0.10% / 27.49%

7 Day CHG~0.00%

Published-18 Jan, 2018 | 02:00

Updated-03 Oct, 2024 | 20:42

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: This vulnerability applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).

CVE-2011-1543

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-4.3||MEDIUM

EPSS-0.15% / 36.87%

7 Day CHG~0.00%

Published-29 Apr, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-1545

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.14% / 35.47%

7 Day CHG~0.00%

Published-03 May, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_performance_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-0277

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.17% / 38.33%

7 Day CHG~0.00%

Published-09 Feb, 2011 | 00:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Power Manager (HPPM) 4.3.2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

Vendor-n/a HP Inc.

Product-power_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4032

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.17% / 38.56%

7 Day CHG~0.00%

Published-01 Nov, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_performance_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-3989

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.13% / 33.22%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_virtual_machine_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4106

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.11% / 30.27%

7 Day CHG~0.00%

Published-01 Nov, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_for_linux n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-4024

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.12% / 31.54%

7 Day CHG~0.00%

Published-28 Oct, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_power_management n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-3288

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.12% / 31.54%

7 Day CHG~0.00%

Published-22 Oct, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1968

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.15% / 35.67%

7 Day CHG~0.00%

Published-14 Jul, 2010 | 18:31

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Software Installer for Windows before 6.1 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors, a different vulnerability than CVE-2010-1971.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows insight_software_installer n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1971

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.15% / 35.67%

7 Day CHG~0.00%

Published-14 Jul, 2010 | 18:31

Updated-11 Apr, 2025 | 00:51

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows insight_software_installer n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2010-1037

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.14% / 35.47%

7 Day CHG~0.00%

Published-28 Apr, 2010 | 22:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP System Insight Manager before 6.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-systems_insight_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2009-2677

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.06% / 19.75%

7 Day CHG~0.00%

Published-14 Aug, 2009 | 15:00

Updated-07 Aug, 2024 | 05:59

Cross-site request forgery (CSRF) vulnerability in HP Insight Control Suite For Linux (aka ICE-LX) before 2.11 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-insight_control_suite_for_linux n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2009-0940

Matching Score-6

Assigner-MITRE Corporation

Product-color_laserjet_4730_mfp laserjet_2200dtn color_mfp_cm8060 laserjet_4_plus\/m_plus laserjet_1010 laserjet_5l laserjet_4v\/mv color_laserjet_5500 laserjet_9050mfp color_laserjet_4650 laserjet_8100 laserjet_2420 laserjet_4000 laserjet_4200dtn digital_senders laserjet_1000 laserjet_1320 color_laserjet_8500 color_laserjet_2605dtn laserjet_4350dtn laserjet_8150dn 9200c_digital_sender laserjet_1018s laserjet_2500 9250c_digital_sender color_laserjet_4600hdn laserjet_p4010 color_laserjet_4600dn laserjet_1160 laserjet_8000 color_laserjet_1500 color_laserjet_2500l laserjet_4m_plus laserjet_p1005 laserjet_m5025_mfp laserjet_2100 color_mfp_cm8050 laserjet_1005 laserjet_2300 laserjet_4240n laserjet_p1500 laserjet_1022nw color_laserjet_2500n color_laserjet_4700 laserjet_p4510 laserjet_5200 laserjet_9000_mfp laserjet_iiip laserjet_p2015 laserjet_2430 color_laserjet_2500 color_laserjet_2500tn laserjet_m1522n_mfp 8100c_digital_sender laserjet_5100dtn laserjet_9000 laserjet_9050 laserjet_iiid laserjet_p4500 laserjet_5 laserjet_4100mfp laserjet_9000mfp laserjet_1100 laserjet_4300 laserjet_9065 laserjet_1020 color_laserjet_2500lse color_laserjet_4600 laserjet_5si laserjet_p2010 laserjet_p2000 laserjet_4100_mfp laserjet_iid laserjet_1022 laserjet_2500c laserjet_2600c laserjet_4345mfp laserjet_2000 laserjet_500_plus laserjet_9040mfp laserjet_9040 color_laserjet_8550 laserjet_9055 laserjet_2400 laserjet_9500mfp laserjet_p2030 laserjet_p1000 laserjet_4\/4m laserjet_iip_plus laserjet_m3027_mfp color_laserjet_5550 laserjet_iip laserjet_4250 laserjet_m5035_mfp laserjet_1012 laserjet_2600n laserjet_5100 laserjet_ii laserjet_iii laserjet_p4015 laserjet_4650dn laserjet_5m laserjet_2 laserjet_p1009 laserjet_4000n laserjet_8150 laserjet_2200 color_laserjet_9500_mfp laserjet_9050_mfp 9100c_digital_sender laserjet_1150 laserjet_1015 laserjet_4345_mfp laserjet_5000 laserjet_4l\/ml laserjet_p1006 laserjet_p1505n laserjet_4050 laserjet_m3035_mfp laserjet_p1008 laserjet_5\/m\/n laserjet_4si laserjet_4100 laserjet_4p\/mp laserjet_p1505 color_laserjet_4370mfp laserjet_4 laserjet_1018 laserjet_9500 laserjet_p1007 laserjet_p3000 laserjet_1022n laserjet_2410 laserjet_3700 laserjet_p2050 color_laserjet_9500mfp laserjet_2300dn laserjet_m4345_mfp laserjet_3000 color_laserjet laserjet_1020_plus color_laserjet_4600dtn laserjet_5p\/mp laserjet_p3005 laserjet_1200 laserjet_p4014 laserjet_4200ln laserjet_4350 laserjet_4200 color_laserjet_9500 laserjet_4240 laserjet_iiisi laserjet_1300 edgeline_printers n/a

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.1||MEDIUM

EPSS-0.84% / 73.71%

7 Day CHG~0.00%

Published-18 Mar, 2009 | 20:35

Updated-07 Aug, 2024 | 04:57

Multiple cross-site request forgery (CSRF) vulnerabilities in the HP Embedded Web Server (EWS) on HP LaserJet Printers, Edgeline Printers, and Digital Senders allow remote attackers to hijack the intranet connectivity of arbitrary users for requests that (1) print documents via unknown vectors, (2) modify the network configuration via a NetIPChange request to hp/device/config_result_YesNo.html/config, or (3) change the password via the Password and ConfirmPassword parameters to hp/device/set_config_password.html/config.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2016-8513

Matching Score-6

Matching Score-6

CVSS Score-8||HIGH

EPSS-0.17% / 39.09%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 20:26

A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. The problem impacts all versions prior to 7.6.

Product-version_control_repository_manager Version Control Repository Manager (VCRM)

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5451

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.11% / 30.61%

7 Day CHG~0.00%

Published-23 Nov, 2015 | 02:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-operations_orchestration n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2016-4371

Matching Score-6

Assigner-MITRE Corporation

Product-service_manager_web_client service_manager_mobility service_manager_windows_client service_manager_service_request_catalog service_manager_server service_manager n/a

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8||HIGH

EPSS-0.07% / 21.20%

7 Day CHG~0.00%

Published-19 Jun, 2016 | 01:00

Updated-12 Apr, 2025 | 10:46

HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery (SSRF) attacks via unspecified vectors, related to the Server, Web Client, Windows Client, and Service Request components.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5445

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-0.09% / 26.94%

7 Day CHG~0.00%

Published-05 Jan, 2016 | 11:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-storeonce_backup_system_software n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-5412

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.05% / 15.28%

7 Day CHG~0.00%

Published-26 Aug, 2015 | 18:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-version_control_repository_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-2134

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.08% / 23.25%

7 Day CHG~0.00%

Published-21 Jul, 2015 | 19:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2015-1391

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.8||HIGH

EPSS-0.17% / 38.85%

7 Day CHG~0.00%

Published-05 Sep, 2023 | 00:00

Updated-30 Sep, 2024 | 19:18

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.

Vendor-n/a HP Inc.

Product-airwave n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2014-2633

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.30% / 53.03%

7 Day CHG~0.00%

Published-23 Aug, 2014 | 23:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in the server in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-service_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2014-7874

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.16% / 37.51%

7 Day CHG~0.00%

Published-19 Oct, 2014 | 01:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-system_management_homepage hp-ux n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6852

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-6.8||MEDIUM

EPSS-0.37% / 57.82%

7 Day CHG~0.00%

Published-22 Nov, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in html/json.html on HP 2620 switches allows remote attackers to hijack the authentication of administrators for requests that change an administrative password via the setPassword method.

Vendor-n/a HP Inc.

Product-2620-24-poe\+_switch n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6188

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.14% / 34.64%

7 Day CHG~0.00%

Published-14 Mar, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2014-2641

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6||MEDIUM

EPSS-0.06% / 17.48%

7 Day CHG~0.00%

Published-02 Oct, 2014 | 00:00

Updated-12 Apr, 2025 | 10:46

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6202

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.44% / 62.12%

7 Day CHG~0.00%

Published-24 Feb, 2014 | 02:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site request forgery (CSRF) vulnerabilities in HP Service Manager 9.30, 9.31, 9.32, and 9.33 allow remote attackers to hijack the authentication of unspecified victims for requests that (1) insert XSS sequences or (2) execute arbitrary code.

Vendor-n/a HP Inc.

Product-service_manager n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2023-42027

Matching Score-6

Assigner-IBM Corporation

Matching Score-6

Assigner-IBM Corporation

CVSS Score-4.3||MEDIUM

EPSS-0.04% / 11.05%

7 Day CHG~0.00%

Published-02 Nov, 2023 | 23:40

Updated-05 Sep, 2024 | 14:34

IBM CICS TX cross-site request forgery

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 266057.

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc

Product-txseries_for_multiplatforms linux_kernel cics_tx hp-ux windows aix CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-3256

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.12% / 31.50%

7 Day CHG~0.00%

Published-08 Sep, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Business Availability Center (BAC) 8.07 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-business_availability_center n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2019-6325

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-0.22% / 44.27%

7 Day CHG~0.00%

Published-17 Jun, 2019 | 15:55

Updated-04 Aug, 2024 | 20:16

HP Color LaserJet Pro M280-M281 Multifunction Printer series (before v. 20190419), HP LaserJet Pro MFP M28-M31 Printer series (before v. 20190426) may have an embedded web server that is potentially vulnerable to Cross-site Request Forgery.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-2003

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.34% / 55.82%

7 Day CHG~0.00%

Published-02 May, 2012 | 22:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Insight Management Agents before 9.0.0.0 on Windows Server 2003 and 2008 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.Microsoft Corporation

Product-windows_server_2008 windows_server_2003 windows_2003_server insight_management_agents n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2018-7097

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.90% / 74.67%

7 Day CHG~0.00%

Published-14 Aug, 2018 | 14:00

Updated-05 Aug, 2024 | 06:17

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be exploited remotely to allow cross-site request forgery.

Product-3par_service_provider HPE 3PAR Service Processors

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2018-5921

Matching Score-6

Assigner-HP Inc.

Product-j8a13a_firmware cf068a l2683a f2a79a_firmware z8z13a_firmware j8a12a j8j78a_firmware j8a10a j7z98a f2a77a j7x28a j8a11a_firmware l3u45a b5l26a_firmware j8j76a j8a06a l1h45a l3u50a j8j74a p7z47a l3u62a_firmware h0dc9a l3u57a_firmware f2a81a_firmware x3a71a f2a71a_firmware d7p68a_firmware z8z23a_firmware l3u41a_firmware cz248a_firmware l3u63a cz249a_firmware x3a80a_firmware l3u48a x3a81a cf067a_firmware l8z07a_firmware g1w47v j8j80a_firmware g1w41a p7z48a x3a65a f2a80a_firmware l3u69a_firmware l3u43a_firmware cd645a_firmware b3g84a g1w39a j8j73a_firmware c2s12v z8z01a_firmware g1w39a_firmware l3u67a l3u70a b3g85a_firmware g1w40v z8z16a_firmware cc523a_firmware z8z22a_firmware c2s11v_firmware cz249a j7z98a_firmware x3a62a_firmware cf066a_firmware z8z11a_firmware j8j74a_firmware f2a71a m0p36a a2w75a_firmware g1w46v l3u49a cf117a_firmware j8a17a l3u42a_firmware cf116a j8j79a z8z08a_firmware m0p40a z8z21a l3u51a a2w79a_firmware a2w76a_firmware c2s11v j8j66a cz250a_firmware h0dc9a_firmware j8j71a_firmware j8a10a_firmware z8z08a j8j63a b5l46a_firmware x3a80a p7z48a_firmware b5l47a_firmware b5l49a a2w77a z8z11a d7p73a x3a63a_firmware l1h45a_firmware x3a66a k0q21a z8z04a c2s12v_firmware m0p39a_firmware z8z12a_firmware x3a60a_firmware k0q22a g1w40a b3g85a a2w75a z8z04a_firmware cd644a_firmware cz244a_firmware c2s12a l3u42a z8z19a l3u55a_firmware z8z05a_firmware cz245a f2a70a_firmware k0q17a z8z21a_firmware b5l39a_firmware g1w47a_firmware j7z06a_firmware cz248a l3u59a_firmware x3a93a_firmware x3a89a l3u48a_firmware z8z17a_firmware x3a79a_firmware g1w40a_firmware ca251a_firmware b5l39a j7x28a_firmware k0q18a_firmware d7p71a_firmware k0q14a_firmware x3a84a_firmware l3u46a_firmware cf069a a2w78a_firmware x3a81a_firmware k0q19a g1w41v x3a63a j8j71a x3a60a j8a16a_firmware l3u43a z8z18a j8a04a_firmware k0q21a_firmware l3u52a_firmware x3a83a_firmware cd645a cf367a_firmware l3u45a_firmware cf068a_firmware j8j80a d7p73a_firmware cc522a_firmware cc524a_firmware z8z02a a2w78a x3a75a_firmware b5l54a_firmware l3u62a b5l48a_firmware cc523a a2w79a z8z09a f2a78v j8j66a_firmware l8z07a x3a79a a2w76a j8a06a_firmware z8z02a_firmware x3a74a_firmware l2683a_firmware l3u49a_firmware x3a87a_firmware x3a77a f2a67a_firmware x3a62a g1w41v_firmware x3a65a_firmware j8a16a z8z14a l3u60a x3a86a z8z18a_firmware j8j72a_firmware cz245a_firmware cc524a z8z23a l3u41a z8z16a l3u56a_firmware j7z04a_firmware x3a59a cc522a j8j65a_firmware g1w47v_firmware c2s11a m0p40a_firmware e6b71a_firmware x3a84a z8z17a j8a13a e6b73a_firmware cf069a_firmware m0p33a m0p35a p7z47a_firmware cz250a d7p68a d7p70a z8z13a l3u44a_firmware z8z19a_firmware l3u47a c2s12a_firmware l3u70a_firmware x3a77a_firmware l3u47a_firmware m0p32a j8j64a j7z04a cf118a cd646a_firmware l3u46a j8j70a l3u69a x3a69a_firmware l2762a_firmware j7z99a l3u57a x3a72a_firmware ca251a m0p32a_firmware g1w46v_firmware b5l07a k0q20a_firmware x3a66a_firmware b5l07a_firmware f2a79a x3a92a j8a17a_firmware b5l05a cz244a j8a12a_firmware cf067a z8z07a_firmware z8z09a_firmware x3a86a_firmware d7p70a_firmware b5l06a k0q15a_firmware z8z15a_firmware k0q18a b5l50a g1w39v_firmware l3u61a z8z07a b5l04a k0q17a_firmware g1w39v z8z05a f2a76a x3a92a_firmware b3g84a_firmware l3u67a_firmware m0p35a_firmware z8z06a_firmware l3u59a j8j72a cf117a cf118a_firmware l3u64a z8z03a z8z03a_firmware l3u51a_firmware l3u44a cf066a j8a05a_firmware l3u55a b5l04a_firmware k0q15a l3u66a_firmware k0q19a_firmware a2w77a_firmware j7z99a_firmware j8j67a x3a83a z8z01a b5l06a_firmware z8z10a_firmware f2a67a j8a05a x3a75a e6b73a l3u61a_firmware j8j64a_firmware b5l47a j8j76a_firmware b5l48a f2a81a z8z15a x3a78a b5l50a_firmware b5l49a_firmware j8j67a_firmware l3u56a j8j63a_firmware z8z06a b5l54a l3u40a_firmware l3u65a l3u64a_firmware cd644a m0p33a_firmware b5l46a z8z00a x3a90a m0p36a_firmware x3a71a_firmware g1w46a_firmware l2762a j8j70a_firmware c2s11a_firmware e6b71a j8a11a f2a76a_firmware z8z22a b5l05a_firmware x3a90a_firmware f2a77a_firmware x3a89a_firmware z8z20a l3u52a cd646a z8z10a l3u65a_firmware j7z06a j8j65a l3u50a_firmware x3a72a x3a78a_firmware g1w40v_firmware l3u66a cf116a_firmware b3g86a b3g86a_firmware x3a59a_firmware m0p39a x3a87a g1w41a_firmware l3u63a_firmware j8a04a z8z00a_firmware x3a74a j8j78a z8z14a_firmware k0q20a l3u40a k0q22a_firmware z8z20a_firmware x3a68a k0q14a d7p71a x3a68a_firmware g1w47a j8j79a_firmware z8z12a g1w46a b5l26a x3a69a f2a78v_firmware j8j73a f2a70a f2a80a x3a93a cf367a Certain HP Enterprise Printers, HP PageWide Printers, and MFP Products

Matching Score-6

Assigner-HP Inc.

CVSS Score-8.8||HIGH

EPSS-0.22% / 44.27%

7 Day CHG~0.00%

Published-03 Oct, 2018 | 20:00

Updated-17 Sep, 2024 | 02:12

A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129_000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege.

Vendor-HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2017-5796

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.49% / 64.56%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-16 Sep, 2024 | 19:30

A Remote Cross Site Request Forgery (CSRF) vulnerability in HPE 2620 Series Network Switches version RA.15.05.0006 was found.

Product-j9627a j9623a j9626a_firmware j9623a_firmware j9625a_firmware j9624a_firmware j9626a j9625a j9627a_firmware j9624a 2620 Series Network Switches

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2017-5781

Matching Score-6

Matching Score-6

CVSS Score-8.8||HIGH

EPSS-0.22% / 44.27%

7 Day CHG~0.00%

Published-15 Feb, 2018 | 22:00

Updated-17 Sep, 2024 | 01:37

A CSRF vulnerability in HPE Matrix Operating Environment version v7.6 was found.

Product-matrix_operating_environment Matrix Operating Environment

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-3846

Matching Score-6

Assigner-Flexera Software LLC

Matching Score-6

Assigner-Flexera Software LLC

CVSS Score-6.8||MEDIUM

EPSS-0.16% / 36.91%

7 Day CHG~0.00%

Published-12 Apr, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP System Management Homepage (SMH) 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts.

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2012-5216

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.13% / 33.49%

7 Day CHG~0.00%

Published-28 Mar, 2013 | 23:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability on HP ProCurve 1700-8 (aka J9079A) switches with software before VA.02.09 and 1700-24 (aka J9080A) switches with software before VB.02.09 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-procurve_switch_1700-24 procurve_switch_1700-8 procurve_switch_software n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2013-6192

Matching Score-6

Assigner-HP Inc.

Matching Score-6

Assigner-HP Inc.

CVSS Score-6.8||MEDIUM

EPSS-0.12% / 31.50%

7 Day CHG~0.00%

Published-17 Dec, 2013 | 02:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-n/a HP Inc.

Product-operations_orchestration n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-7201

Matching Score-6

Matching Score-6

Product-storeever_msl2024_firmware storeever_msl2024 storeever_1\/8_g2_tape_autoloader storeever_1\/8_g2_tape_autoloader_firmware HPE StoreEver MSL Tape Libraries; HPE StoreEver 1/8 G2 Tape Autoloaders

CVSS Score-8.8||HIGH

EPSS-0.18% / 40.51%

7 Day CHG~0.00%

Published-18 Dec, 2020 | 22:20

Updated-04 Aug, 2024 | 09:25

A potential security vulnerability has been identified in the HPE StoreEver MSL2024 Tape Library and HPE StoreEver 1/8 G2 Tape Autoloaders. The vulnerability could be remotely exploited to allow Cross-site Request Forgery (CSRF).

Vendor-n/a HP Inc.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-1325

Matching Score-4

Assigner-JPCERT/CC

Matching Score-4

Assigner-JPCERT/CC

CVSS Score-5.8||MEDIUM

EPSS-0.16% / 37.91%

7 Day CHG~0.00%

Published-13 May, 2011 | 17:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in EC-CUBE before 2.11.0 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

Vendor-lockon n/a

Product-ec-cube n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-2321

Matching Score-4

Assigner-Jenkins Project

Matching Score-4

Assigner-Jenkins Project

CVSS Score-8.1||HIGH

EPSS-0.15% / 35.86%

7 Day CHG~0.00%

Published-03 Dec, 2020 | 15:55

Updated-04 Aug, 2024 | 07:09

A cross-site request forgery (CSRF) vulnerability in Jenkins Shelve Project Plugin 3.0 and earlier allows attackers to shelve, unshelve, or delete a project.

Vendor-Jenkins

Product-shelve_project Jenkins Shelve Project Plugin

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-1324

Matching Score-4

Assigner-JPCERT/CC

Matching Score-4

Assigner-JPCERT/CC

CVSS Score-5.8||MEDIUM

EPSS-0.12% / 30.93%

7 Day CHG~0.00%

Published-09 May, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

Multiple cross-site request forgery (CSRF) vulnerabilities in the management screen on Buffalo WHR, WZR2, WZR, WER, and BBR series routers with firmware 1.x; BHR-4RV and FS-G54 routers with firmware 2.x; and AS-100 routers allow remote attackers to hijack the authentication of administrators for requests that modify settings, as demonstrated by changing the login password.

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2011-0440

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-5.8||MEDIUM

EPSS-0.29% / 52.38%

7 Day CHG~0.00%

Published-28 Mar, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Cross-site request forgery (CSRF) vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs.

Vendor-n/a Mahara

Product-mahara n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2022-23976

Matching Score-4

Assigner-Patchstack

Matching Score-4

Assigner-Patchstack

CVSS Score-8.1||HIGH

EPSS-0.21% / 43.78%

7 Day CHG~0.00%

Published-18 Apr, 2022 | 16:20

Updated-20 Feb, 2025 | 20:26

WordPress Access Demo Importer plugin <= 1.0.7 - Cross-Site Request Forgery (CSRF) vulnerability leading to Data Reset (Posts / Pages / Media)

Cross-Site Request Forgery (CSRF) in Access Demo Importer <= 1.0.7 on WordPress allows an attacker to reset all data (posts / pages / media).

Vendor-accesspressthemes AccessPress Themes

Product-access_demo_importer Access Demo Importer (WordPress plugin)

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-24130

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-8.1||HIGH

EPSS-0.09% / 27.05%

7 Day CHG~0.00%

Published-20 Aug, 2021 | 19:27

Updated-04 Aug, 2024 | 15:05

A cross site request forgery (CSRF) vulnerability in the configure.html component of Ponzu 0.11.0 allows attackers to change user and administrator credentials, and add or delete administrator accounts.

Vendor-ponzu-cms n/a

Product-ponzu n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-23830

Matching Score-4

Assigner-MITRE Corporation

Matching Score-4

Assigner-MITRE Corporation

CVSS Score-7.1||HIGH

EPSS-0.17% / 38.25%

7 Day CHG~0.00%

Published-02 Sep, 2020 | 16:06

Updated-04 Aug, 2024 | 15:05

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management System v1.0 allows remote attackers to deny future logins by changing an authenticated victim's username when they visit a third-party site.

Vendor-stock_management_system_project n/a

Product-stock_management_system n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2022-22811

Matching Score-4

Assigner-Schneider Electric

Product-fellerlynk wiser_for_knx spacelynk wiser_for_knx_firmware spacelynk_firmware fellerlynk_firmware spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

Matching Score-4

Assigner-Schneider Electric

CVSS Score-8.1||HIGH

EPSS-0.10% / 29.02%

7 Day CHG~0.00%

Published-09 Feb, 2022 | 22:05

Updated-03 Aug, 2024 | 03:21

A CWE-352: Cross-Site Request Forgery (CSRF) vulnerability exists that could induce users to perform unintended actions, leading to the override of the system�s configurations when an attacker persuades a user to visit a rogue website. Affected Product: spaceLYnk (V2.6.2 and prior), Wiser for KNX (formerly homeLYnk) (V2.6.2 and prior), fellerLYnk (V2.6.2 and prior)

Vendor-n/a

CWE ID-CWE-352

Cross-Site Request Forgery (CSRF)

CVE-2020-2281

Matching Score-4

Assigner-Jenkins Project