{"id":"CVE-2015-0651","aliases":["EUVD-2015-0664","GHSA-rxr7-6h8v-6mp2"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking...","description":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00636,"percentile":0.50763,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2015-02-27T02:00:00Z","modified":"2026-06-17T00:20:40Z","products":[{"vendor":"cisco","product":"application_networking_manager"}],"references":[{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0651","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1031815","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/72796","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0651"},{"url":"https://github.com/advisories/GHSA-rxr7-6h8v-6mp2"}],"sources":{"cve":[{"id":"CVE-2015-0651","description":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.","status":"published","published":"2015-02-27T02:00:00Z","modified":"2024-08-06T04:17:32.595Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0664","description":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.","status":"published","published":"2015-02-27T02:00:00Z","modified":"2024-08-06T04:17:32Z","updated_at":"2026-11-03T02:22:18.427753Z"}],"ghsa":[{"id":"GHSA-rxr7-6h8v-6mp2","title":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking...","description":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.","status":"published","published":"2022-05-17T04:03:30Z","modified":"2023-01-28T05:01:05Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:43:28.853581Z"}],"nvd":[{"id":"CVE-2015-0651","description":"Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cisco 4710 Application Control Engine (ACE) appliances, allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuo99753.","status":"published","published":"2015-02-27T02:59:34.167Z","modified":"2026-06-17T00:20:40.623Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:03:03.313464Z"}]}}