{"id":"CVE-2015-0741","aliases":["EUVD-2015-0754","GHSA-9xw5-w2cf-cxfp"],"status":"published","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01253,"percentile":0.69655,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-352"],"published":"2015-05-21T10:00:00Z","modified":"2026-06-17T00:20:49Z","products":[{"vendor":"cisco","product":"hosted_collaboration_solution"}],"references":[{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38927","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1032380","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/74754","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0741"},{"url":"https://github.com/advisories/GHSA-9xw5-w2cf-cxfp"}],"sources":{"cve":[{"id":"CVE-2015-0741","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.","status":"published","published":"2015-05-21T10:00:00Z","modified":"2024-08-06T04:17:32.793Z","updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-0754","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.","status":"published","published":"2015-05-21T10:00:00Z","modified":"2024-08-06T04:17:32Z","updated_at":"2026-11-03T02:22:18.427753Z"}],"ghsa":[{"id":"GHSA-9xw5-w2cf-cxfp","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.","status":"published","published":"2022-05-17T03:07:42Z","modified":"2023-01-27T05:06:40Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:42:57.782632Z"}],"nvd":[{"id":"CVE-2015-0741","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.","status":"published","published":"2015-05-21T10:59:00.067Z","modified":"2026-06-17T00:20:49.777Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:03:04.906059Z"}]}}