8.8

CVE-2015-3140

Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synametrics ≫ Synaman Version 1.0 Update build786
Synametrics ≫ Synaman Version 1.0 Update build805
Synametrics ≫ Synaman Version 1.1 Update build972
Synametrics ≫ Synaman Version 2.0 Update build1185
Synametrics ≫ Synaman Version 2.1 Update build1202
Synametrics ≫ Synaman Version 2.2 Update build1205
Synametrics ≫ Synaman Version 2.2 Update build1246
Synametrics ≫ Synaman Version 2.3 Update build1259
Synametrics ≫ Synaman Version 2.3 Update build1261
Synametrics ≫ Synaman Version 2.4 Update build1272
Synametrics ≫ Synaman Version 2.5 Update build1282
Synametrics ≫ Synaman Version 2.5 Update build1289
Synametrics ≫ Synaman Version 2.5 Update build1291
Synametrics ≫ Synaman Version 2.5 Update build1302
Synametrics ≫ Synaman Version 2.5 Update build1303
Synametrics ≫ Synaman Version 2.5 Update build1304
Synametrics ≫ Synaman Version 2.5 Update build1310
Synametrics ≫ Synaman Version 2.5 Update build1313
Synametrics ≫ Synaman Version 2.5 Update build1314
Synametrics ≫ Synaman Version 2.5 Update build1316
Synametrics ≫ Synaman Version 2.5 Update build1318
Synametrics ≫ Synaman Version 2.5 Update build1321
Synametrics ≫ Synaman Version 2.5 Update build1322
Synametrics ≫ Synaman Version 2.5 Update build1324
Synametrics ≫ Synaman Version 2.5 Update build1325
Synametrics ≫ Synaman Version 2.6 Update build1328
Synametrics ≫ Synaman Version 2.7 Update build1337
Synametrics ≫ Synaman Version 2.7 Update build1341
Synametrics ≫ Synaman Version 2.7 Update build1342
Synametrics ≫ Synaman Version 3.0 Update build1358
Synametrics ≫ Synaman Version 3.0 Update build1363
Synametrics ≫ Synaman Version 3.0 Update build1365
Synametrics ≫ Synaman Version 3.1 Update build1380
Synametrics ≫ Synaman Version 3.1 Update build1382
Synametrics ≫ Synaman Version 3.1 Update build1384
Synametrics ≫ Synaman Version 3.1 Update build1386
Synametrics ≫ Synaman Version 3.2 Update build1393
Synametrics ≫ Synaman Version 3.2 Update build1394
Synametrics ≫ Synaman Version 3.2 Update build1398
Synametrics ≫ Synaman Version 3.3 Update build1418
Synametrics ≫ Synaman Version 3.3 Update build1425
Synametrics ≫ Synaman Version 3.3 Update build1430
Synametrics ≫ Synaman Version 3.4 Update build1434
Synametrics ≫ Synaman Version 3.4 Update build1444
Synametrics ≫ Syncrify Version 1.3 Update build352
Synametrics ≫ Syncrify Version 1.3 Update build369
Synametrics ≫ Syncrify Version 1.3 Update build372
Synametrics ≫ Syncrify Version 1.3 Update build375
Synametrics ≫ Syncrify Version 1.4 Update build379
Synametrics ≫ Syncrify Version 1.4 Update build393
Synametrics ≫ Syncrify Version 2.0 Update build413
Synametrics ≫ Syncrify Version 2.0 Update build415
Synametrics ≫ Syncrify Version 2.1 Update build420
Synametrics ≫ Syncrify Version 2.1 Update build422
Synametrics ≫ Syncrify Version 2.2 Update build429
Synametrics ≫ Syncrify Version 2.2 Update build432
Synametrics ≫ Syncrify Version 2.3 Update build443
Synametrics ≫ Syncrify Version 2.3 Update build444
Synametrics ≫ Syncrify Version 2.4 Update build459
Synametrics ≫ Syncrify Version 2.4 Update build463
Synametrics ≫ Syncrify Version 2.5 Update build473
Synametrics ≫ Syncrify Version 2.6 Update build510
Synametrics ≫ Syncrify Version 2.6 Update build517
Synametrics ≫ Syncrify Version 2.6 Update build522
Synametrics ≫ Syncrify Version 3.0 Update build580
Synametrics ≫ Syncrify Version 3.0 Update build591
Synametrics ≫ Syncrify Version 3.0 Update build596
Synametrics ≫ Syncrify Version 3.1 Update build614
Synametrics ≫ Syncrify Version 3.2 Update build629
Synametrics ≫ Syncrify Version 3.2 Update build630
Synametrics ≫ Syncrify Version 3.2 Update build633
Synametrics ≫ Syncrify Version 3.2 Update build638
Synametrics ≫ Syncrify Version 3.2 Update build649
Synametrics ≫ Syncrify Version 3.3 Update build682
Synametrics ≫ Syncrify Version 3.3 Update build688
Synametrics ≫ Syncrify Version 3.3 Update build693
Synametrics ≫ Syncrify Version 3.3 Update build696
Synametrics ≫ Syncrify Version 3.3 Update build700
Synametrics ≫ Syncrify Version 3.3 Update build704
Synametrics ≫ Syncrify Version 3.4 Update build725
Synametrics ≫ Syncrify Version 3.4 Update build735
Synametrics ≫ Syncrify Version 3.4 Update build741
Synametrics ≫ Syncrify Version 3.4 Update build749
Synametrics ≫ Syncrify Version 3.5 Update build778
Synametrics ≫ Syncrify Version 3.5 Update build781
Synametrics ≫ Syncrify Version 3.6 Update build800
Synametrics ≫ Syncrify Version 3.6 Update build809
Synametrics ≫ Syncrify Version 3.6 Update build812
Synametrics ≫ Syncrify Version 3.6 Update build813
Synametrics ≫ Syncrify Version 3.6 Update build814
Synametrics ≫ Syncrify Version 3.6 Update build823
Synametrics ≫ Syncrify Version 3.6 Update build828
Synametrics ≫ Syncrify Version 3.7 Update build833
Synametrics ≫ Syncrify Version 3.7 Update build834
Synametrics ≫ Syncrify Version 3.7 Update build844
Synametrics ≫ Syncrify Version 3.7 Update build850
Synametrics ≫ Syntail Version 1.0 Update build420
Synametrics ≫ Syntail Version 1.1 Update build429
Synametrics ≫ Syntail Version 1.2 Update build445
Synametrics ≫ Syntail Version 1.5 Update build561
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.29% 0.665
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-352 Cross-Site Request Forgery (CSRF)

The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.

http://web.synametrics.com/SynamanVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation
https://web.synametrics.com/SyncrifyVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation
https://web.synametrics.com/SyntailVersionHistory.htm
Vendor Advisory
Release Notes
Mitigation