CVE-2019-1632

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to use a web browser and the privileges of the user to perform arbitrary actions on the affected device.

• CWE-352
• CWE-352

• http://www.securityfocus.com/bid/108858Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-csrfVendor Advisory
• http://www.securityfocus.com/bid/108858Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-csrfVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16312s-cms V3.0 has XSS in index.php?type=text via the S_id param…6.1
• CVE-2019-16313ifw8 Router ROM v4.31 allows credential disclosure by readin…7.5
• CVE-2019-16314Indexhibit 2.1.5 allows a product reinstallation, with resul…9.8
• CVE-2019-16317In Pimcore before 5.7.1, an attacker with limited privileges…8.8
• CVE-2019-16318In Pimcore before 5.7.1, an attacker with limited privileges…8.8
• CVE-2019-16319In Wireshark 3.0.0 to 3.0.3 and 2.6.0 to 2.6.10, the Gryphon…7.5
• CVE-2019-16320Cobham Sea Tel v170 224521 through v194 225444 devices allow…5.3
• CVE-2019-16321ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a req…6.1
• CVE-2019-16326D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-C…8.8
• CVE-2019-16327D-Link DIR-601 B1 2.00NA devices are vulnerable to authentic…9.8
• CVE-2019-16328In RPyC 4.1.x through 4.1.1, a remote attacker can dynamical…7.5
• CVE-2019-16330In NCH Express Accounts Accounting v7.02, persistent cross s…5.4