CVE Feed

    Dashboard / CVE / CVE-2015-5412

    CVE-2015-5412

    Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

    Published:Aug 26, 2015
    Last Modified:Apr 12, 2025
    EPS:Aug 26, 2015
    EPSS Score:0.00051
    CVSS Score:6

    Affected Products

    Vendor
    Hp
    Product
    Version Control Repository Manager

    Exploits

    No exploit reference

    Related CVEs

    CVE-2016-8513 (CVSS 8) — A Cross-Site Request Forgery (CSRF) vulnerability in HPE Version Control Repository Manager (VCRM) was found. …
    CVE-2017-5787 (CVSS 6.5) — A remote denial of service vulnerability in HPE Version Control Repository Manager (VCRM) in all versions prio…
    CVE-2016-8515 (CVSS 8.8) — A remote malicious file upload vulnerability in HPE Version Control Repository Manager (VCRM) was found. The p…
    CVE-2016-8514 (CVSS 6.5) — A remote information disclosure in HPE Version Control Repository Manager (VCRM) was found. The problem impact…
    CVE-2015-8651 (CVSS 8.8) — Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS…
    CVE-2015-5413 (CVSS 4) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges…
    CVE-2015-5411 (CVSS 6.8) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitiv…
    CVE-2015-5410 (CVSS 6.5) — HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitra…
    CVE-2015-5409 (CVSS 7.5) — Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users…
    CVE-2015-3113 (CVSS 9.8) — Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High