CVE-2014-7996: Cisco Unified Computing System

Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Integrated Management Controller in Cisco Unified Computing System allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuq45477.

Affected products

• Cisco Unified Computing System: affected versions not specified

Published 2014-11-18. Last modified 2026-06-17.