CVE-2014-0336: Serena Dimensions Cm

Medium severity, CVSS 6.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the web client in Serena Dimensions CM 12.2 build 7.199.0 allows remote attackers to hijack the authentication of administrators for requests that use the user_new_master parameter to the adminconsole/ URI.

Affected products

• Serena Dimensions Cm: version 12.2 only

Published 2014-03-06. Last modified 2026-06-17.