8.8

CVE-2015-3140

Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synametrics ≫ Synaman Version1.0 Updatebuild786
Synametrics ≫ Synaman Version1.0 Updatebuild805
Synametrics ≫ Synaman Version1.1 Updatebuild972
Synametrics ≫ Synaman Version2.0 Updatebuild1185
Synametrics ≫ Synaman Version2.1 Updatebuild1202
Synametrics ≫ Synaman Version2.2 Updatebuild1205
Synametrics ≫ Synaman Version2.2 Updatebuild1246
Synametrics ≫ Synaman Version2.3 Updatebuild1259
Synametrics ≫ Synaman Version2.3 Updatebuild1261
Synametrics ≫ Synaman Version2.4 Updatebuild1272
Synametrics ≫ Synaman Version2.5 Updatebuild1282
Synametrics ≫ Synaman Version2.5 Updatebuild1289
Synametrics ≫ Synaman Version2.5 Updatebuild1291
Synametrics ≫ Synaman Version2.5 Updatebuild1302
Synametrics ≫ Synaman Version2.5 Updatebuild1303
Synametrics ≫ Synaman Version2.5 Updatebuild1304
Synametrics ≫ Synaman Version2.5 Updatebuild1310
Synametrics ≫ Synaman Version2.5 Updatebuild1313
Synametrics ≫ Synaman Version2.5 Updatebuild1314
Synametrics ≫ Synaman Version2.5 Updatebuild1316
Synametrics ≫ Synaman Version2.5 Updatebuild1318
Synametrics ≫ Synaman Version2.5 Updatebuild1321
Synametrics ≫ Synaman Version2.5 Updatebuild1322
Synametrics ≫ Synaman Version2.5 Updatebuild1324
Synametrics ≫ Synaman Version2.5 Updatebuild1325
Synametrics ≫ Synaman Version2.6 Updatebuild1328
Synametrics ≫ Synaman Version2.7 Updatebuild1337
Synametrics ≫ Synaman Version2.7 Updatebuild1341
Synametrics ≫ Synaman Version2.7 Updatebuild1342
Synametrics ≫ Synaman Version3.0 Updatebuild1358
Synametrics ≫ Synaman Version3.0 Updatebuild1363
Synametrics ≫ Synaman Version3.0 Updatebuild1365
Synametrics ≫ Synaman Version3.1 Updatebuild1380
Synametrics ≫ Synaman Version3.1 Updatebuild1382
Synametrics ≫ Synaman Version3.1 Updatebuild1384
Synametrics ≫ Synaman Version3.1 Updatebuild1386
Synametrics ≫ Synaman Version3.2 Updatebuild1393
Synametrics ≫ Synaman Version3.2 Updatebuild1394
Synametrics ≫ Synaman Version3.2 Updatebuild1398
Synametrics ≫ Synaman Version3.3 Updatebuild1418
Synametrics ≫ Synaman Version3.3 Updatebuild1425
Synametrics ≫ Synaman Version3.3 Updatebuild1430
Synametrics ≫ Synaman Version3.4 Updatebuild1434
Synametrics ≫ Synaman Version3.4 Updatebuild1444
Synametrics ≫ Syncrify Version1.3 Updatebuild352
Synametrics ≫ Syncrify Version1.3 Updatebuild369
Synametrics ≫ Syncrify Version1.3 Updatebuild372
Synametrics ≫ Syncrify Version1.3 Updatebuild375
Synametrics ≫ Syncrify Version1.4 Updatebuild379
Synametrics ≫ Syncrify Version1.4 Updatebuild393
Synametrics ≫ Syncrify Version2.0 Updatebuild413
Synametrics ≫ Syncrify Version2.0 Updatebuild415
Synametrics ≫ Syncrify Version2.1 Updatebuild420
Synametrics ≫ Syncrify Version2.1 Updatebuild422
Synametrics ≫ Syncrify Version2.2 Updatebuild429
Synametrics ≫ Syncrify Version2.2 Updatebuild432
Synametrics ≫ Syncrify Version2.3 Updatebuild443
Synametrics ≫ Syncrify Version2.3 Updatebuild444
Synametrics ≫ Syncrify Version2.4 Updatebuild459
Synametrics ≫ Syncrify Version2.4 Updatebuild463
Synametrics ≫ Syncrify Version2.5 Updatebuild473
Synametrics ≫ Syncrify Version2.6 Updatebuild510
Synametrics ≫ Syncrify Version2.6 Updatebuild517
Synametrics ≫ Syncrify Version2.6 Updatebuild522
Synametrics ≫ Syncrify Version3.0 Updatebuild580
Synametrics ≫ Syncrify Version3.0 Updatebuild591
Synametrics ≫ Syncrify Version3.0 Updatebuild596
Synametrics ≫ Syncrify Version3.1 Updatebuild614
Synametrics ≫ Syncrify Version3.2 Updatebuild629
Synametrics ≫ Syncrify Version3.2 Updatebuild630
Synametrics ≫ Syncrify Version3.2 Updatebuild633
Synametrics ≫ Syncrify Version3.2 Updatebuild638
Synametrics ≫ Syncrify Version3.2 Updatebuild649
Synametrics ≫ Syncrify Version3.3 Updatebuild682
Synametrics ≫ Syncrify Version3.3 Updatebuild688
Synametrics ≫ Syncrify Version3.3 Updatebuild693
Synametrics ≫ Syncrify Version3.3 Updatebuild696
Synametrics ≫ Syncrify Version3.3 Updatebuild700
Synametrics ≫ Syncrify Version3.3 Updatebuild704
Synametrics ≫ Syncrify Version3.4 Updatebuild725
Synametrics ≫ Syncrify Version3.4 Updatebuild735
Synametrics ≫ Syncrify Version3.4 Updatebuild741
Synametrics ≫ Syncrify Version3.4 Updatebuild749
Synametrics ≫ Syncrify Version3.5 Updatebuild778
Synametrics ≫ Syncrify Version3.5 Updatebuild781
Synametrics ≫ Syncrify Version3.6 Updatebuild800
Synametrics ≫ Syncrify Version3.6 Updatebuild809
Synametrics ≫ Syncrify Version3.6 Updatebuild812
Synametrics ≫ Syncrify Version3.6 Updatebuild813
Synametrics ≫ Syncrify Version3.6 Updatebuild814
Synametrics ≫ Syncrify Version3.6 Updatebuild823
Synametrics ≫ Syncrify Version3.6 Updatebuild828
Synametrics ≫ Syncrify Version3.7 Updatebuild833
Synametrics ≫ Syncrify Version3.7 Updatebuild834
Synametrics ≫ Syncrify Version3.7 Updatebuild844
Synametrics ≫ Syncrify Version3.7 Updatebuild850
Synametrics ≫ Syntail Version1.0 Updatebuild420
Synametrics ≫ Syntail Version1.1 Updatebuild429
Synametrics ≫ Syntail Version1.2 Updatebuild445
Synametrics ≫ Syntail Version1.5 Updatebuild561
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.39
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

http://web.synametrics.com/SynamanVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation
https://web.synametrics.com/SyncrifyVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation
https://web.synametrics.com/SyntailVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation