CVE-2015-6262

Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCum49054 and CSCum49059.

• CWE-352

• http://tools.cisco.com/security/center/viewAlert.x?alertId=40652Vendor Advisory
• http://www.securitytracker.com/id/1033364Third Party Advisory, VDB Entry
• http://tools.cisco.com/security/center/viewAlert.x?alertId=40652Vendor Advisory
• http://www.securitytracker.com/id/1033364Third Party Advisory, VDB Entry

Published

Aug 25, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6255Cross-site scripting (XSS) vulnerability in Cisco Unified We…
• CVE-2015-6256Cisco ASR 5000 devices with software 19.0.M0.60828 allow rem…
• CVE-2015-6258The Internet Access Point Protocol (IAPP) module on Cisco Wi…
• CVE-2015-6259The JavaServer Pages (JSP) component in Cisco Integrated Man…
• CVE-2015-6260Cisco NX-OS 7.1(1)N1(1) on Nexus 5500, 5600, and 6000 device…
• CVE-2015-6261Cisco TelePresence Video Communication Server (VCS) Expressw…
• CVE-2015-6263The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, w…
• CVE-2015-6264Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-6265The CLI in Cisco Application Control Engine (ACE) 4700 A5 3.…
• CVE-2015-6266The guest portal in Cisco Identity Services Engine (ISE) 330…
• CVE-2015-6267Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote …
• CVE-2015-6268Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote …