CVE Feed

    Dashboard / CVE / CVE-2015-5451

    CVE-2015-5451

    Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 10.22.001 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

    Published:Nov 23, 2015
    Last Modified:Apr 12, 2025
    EPS:Nov 23, 2015
    EPSS Score:0.00113
    CVSS Score:6.8

    Affected Products

    Vendor
    Hp
    Product
    Operations Orchestration

    Exploits

    No exploit reference

    Related CVEs

    CVE-2018-6490 (CVSS 5.9) — Denial of Service vulnerability in Micro Focus Operations Orchestration Software, version 10.x. This vulnerabi…
    CVE-2016-8519 (CVSS 9.8) — A remote code execution vulnerability in HPE Operations Orchestration Community edition and Enterprise edition…
    CVE-2017-8994 (CVSS 9.8) — A input validation vulnerability in HPE Operations Orchestration product all versions prior to 10.80, allows f…
    CVE-2016-1997 (CVSS 9.8) — HPE Operations Orchestration 10.x before 10.51 and Operations Orchestration content before 1.7.0 allow remote …
    CVE-2015-2108 (CVSS 3.5) — Unspecified vulnerability in Powershell Operations in HP Operations Orchestration 9.x and 10.x allows remote a…
    CVE-2015-2109 (CVSS 7.5) — Unspecified vulnerability in HP Operations Orchestration 10.x allows remote attackers to bypass authentication…
    CVE-2013-6191 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9 allows remote attackers to in…
    CVE-2013-6192 (CVSS 6.8) — Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration before 9 allows remote attacker…
    CVE-2012-3258 (CVSS 10) — Unspecified vulnerability in HP Operations Orchestration 9.0 before 9.03 allows remote attackers to execute ar…
    CVE-2010-3985 (CVSS 4.3) — Cross-site scripting (XSS) vulnerability in HP Operations Orchestration before 9.0, when Internet Explorer 6.0…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High