CVE-2015-0704

Multiple cross-site request forgery (CSRF) vulnerabilities in API features in Cisco Unified MeetingPlace 8.6(1.9) allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCus95884.

• CWE-352

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38460Vendor Advisory
• http://www.securitytracker.com/id/1032334Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38460Vendor Advisory
• http://www.securitytracker.com/id/1032334Third Party Advisory, VDB Entry

Published

Apr 22, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0698Multiple cross-site scripting (XSS) vulnerabilities in filte…
• CVE-2015-0699SQL injection vulnerability in the Interactive Voice Respons…
• CVE-2015-0700Cross-site request forgery (CSRF) vulnerability in the Dashb…
• CVE-2015-0701Cisco UCS Central Software before 1.3(1a) allows remote atta…
• CVE-2015-0702Unrestricted file upload vulnerability in the Custom Prompts…
• CVE-2015-0703Cross-site scripting (XSS) vulnerability in the administrati…
• CVE-2015-0705Cross-site request forgery (CSRF) vulnerability in the SOAP …
• CVE-2015-0706Open redirect vulnerability in Cisco FireSIGHT System Softwa…
• CVE-2015-0707Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT …
• CVE-2015-0708Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14…
• CVE-2015-0709Cisco IOS 15.5S and IOS XE allow remote authenticated users …
• CVE-2015-0710The Overlay Transport Virtualization (OTV) implementation in…