CVE-2015-3624

Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions...

5.8 MediumPublic exploit

Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content Management System (CMS) before 9.10 SP1 (Build 9.1.0.184.1.120) allows remote attackers to hijack the authentication of content administrators for requests that delete content via a delete action.

Exploit likelihood

2.28%Down 6.7 points since Feb 4, 2022

What each source reports

NVD Score used 5.8

Record: CVE-2015-3624
CVSS 2.0: 5.8 MediumAV:N/AC:M/Au:N/C:N/I:P/A:P
Weakness: CWE-352
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-3624
Updated: 2026-11-02

EUVDEUVD-2015-3666 No score

Record: EUVD-2015-3666
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g48x-6c94-mxpc No score

Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions...

Record: GHSA-g48x-6c94-mxpc
Weakness: CWE-352
Updated: 2026-11-02

Affected products

ektron content management system

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Ektron CMS 9.10 SP1 (Build 9.1.0.184.1.114) - Cross-Site Request Forgery	2015-06-16

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-3624 is a medium vulnerability (CVSS 5.8) in Ektron Content Management System, published June 9, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.28%, the 83rd percentile. No source names a fixed version.