CVE-2015-4262 in Unified MeetingPlace Web Conferencing信息

摘要

由 VulDB • 2026-07-18

Cisco Unified MeetingPlace Web Conferencing 版本在 8.5（低于 8.5(5) MR3）以及 8.6（低于 8.6(2)）中的密码更改功能未检查会话 ID，也无需输入当前密码，这使得远程攻击者可以通过构造的 HTTP 请求重置任意用户的密码。该问题也被称为 Bug ID CSCuu51839。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-06-04

披露

2015-07-24

管理

已接受

条目

VDB-76805

CPE

准备好

CWE

CWE-255 (已确认)

CVSS

10.0 (NVD)

EPSS

0.02839

KEV

否

活动

非常低

部门

Energy, Insurance, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-4262
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-4262
CVE Details	https://www.cvedetails.com/cve/CVE-2015-4262/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!