CVE-2015-0705

Cross-site request forgery (CSRF) vulnerability in the SOAP API endpoints of the web-services directory in Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts, aka Bug ID CSCus97494.

• CWE-352

• http://tools.cisco.com/security/center/viewAlert.x?alertId=38461Vendor Advisory
• http://www.securityfocus.com/bid/74258Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032335Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667Third Party Advisory
• http://tools.cisco.com/security/center/viewAlert.x?alertId=38461Vendor Advisory
• http://www.securityfocus.com/bid/74258Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1032335Third Party Advisory, VDB Entry
• https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667Third Party Advisory

Published

Apr 22, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0699SQL injection vulnerability in the Interactive Voice Respons…
• CVE-2015-0700Cross-site request forgery (CSRF) vulnerability in the Dashb…
• CVE-2015-0701Cisco UCS Central Software before 1.3(1a) allows remote atta…
• CVE-2015-0702Unrestricted file upload vulnerability in the Custom Prompts…
• CVE-2015-0703Cross-site scripting (XSS) vulnerability in the administrati…
• CVE-2015-0704Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2015-0706Open redirect vulnerability in Cisco FireSIGHT System Softwa…
• CVE-2015-0707Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT …
• CVE-2015-0708Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14…
• CVE-2015-0709Cisco IOS 15.5S and IOS XE allow remote authenticated users …
• CVE-2015-0710The Overlay Transport Virtualization (OTV) implementation in…
• CVE-2015-0711The hamgr service in the IPv6 Proxy Mobile (PM) implementati…