{"id":"CVE-2015-3140","aliases":["EUVD-2015-3221","GHSA-22h6-79rc-rj5g"],"status":"published","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01293,"percentile":0.70482,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-352"],"published":"2019-11-21T21:41:58Z","modified":"2026-06-17T00:25:22Z","exploits":[{"source":"exploitdb","id":"EDB-36950","title":"Syncrify Server 3.6 Build 833 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2015-05-08","url":"https://www.exploit-db.com/exploits/36950"},{"source":"exploitdb","id":"EDB-36951","title":"SynaMan 3.4 Build 1436 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2015-05-08","url":"https://www.exploit-db.com/exploits/36951"},{"source":"exploitdb","id":"EDB-36953","title":"SynTail 1.5 Build 566 - Multiple Vulnerabilities","type":"webapps","platform":"php","date":"2015-05-08","url":"https://www.exploit-db.com/exploits/36953"}],"products":[{"vendor":"synametrics","product":"synaman"},{"vendor":"synametrics","product":"syncrify"},{"vendor":"synametrics","product":"syntail"}],"references":[{"url":"http://web.synametrics.com/SynamanVersionHistory.htm","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Release Notes","Vendor Advisory"]},{"url":"https://web.synametrics.com/SyntailVersionHistory.htm","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Release Notes","Vendor Advisory"]},{"url":"https://web.synametrics.com/SyncrifyVersionHistory.htm","tags":["x_refsource_CONFIRM","x_transferred","Mitigation","Release Notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3140"},{"url":"https://github.com/advisories/GHSA-22h6-79rc-rj5g"}],"sources":{"cve":[{"id":"CVE-2015-3140","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567","status":"published","published":"2019-11-21T21:41:58Z","modified":"2024-08-06T05:39:31.534Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3221","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567","status":"published","published":"2019-11-21T21:41:58Z","modified":"2024-08-06T05:39:31Z","updated_at":"2026-11-03T02:22:09.179399Z"}],"ghsa":[{"id":"GHSA-22h6-79rc-rj5g","title":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan...","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567","status":"published","published":"2022-05-24T17:01:39Z","modified":"2023-01-28T05:07:31Z","updated_at":"2026-11-02T14:44:32.070856Z"}],"nvd":[{"id":"CVE-2015-3140","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567","status":"published","published":"2019-11-21T22:15:15.38Z","modified":"2026-06-17T00:25:22.527Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:03:19.73542Z"}]}}