VDB
CVE-2022-20787
CVE-2022-20787
PUBLISHED
CVSS 5.699999809265137 MEDIUM
A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) Software and Cisco Unified CM Session Management Edition (SME) Software could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected device. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user.
EPSS 0.08% · 23.7th percentile
Risk Scores
CVSS 3.1
5.699999809265137
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
EPSS Score
0.08%
23.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | unified_communications_manager | 12.5\(1\), 14.0, 14.0 |
| Cisco | Cisco Unified Communications Manager | n/a |
Exploit Intelligence
Timeline
- Apr 21, 2022 CVE Published
- Apr 22, 2022 EPSS Score
- Jun 11, 2022 EPSS Score
- Aug 1, 2022 EPSS Score
- Sep 20, 2022 EPSS Score
- Nov 9, 2022 EPSS Score
- Dec 29, 2022 EPSS Score
- Feb 17, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 27, 2023 EPSS Score
- Jul 16, 2023 EPSS Score