CVE-2013-3395

no score yetEPSS 0.6%

Cross-site request forgery (CSRF) vulnerability in the web framework on Cisco IronPort Web Security Appliance (WSA) devices, Email Security Appliance (ESA) devices, and Content Security Management Appliance (SMA) devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug IDs CSCuh70263, CSCuh70323, and CSCuh26634.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2013-07-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:content_security_management_appliance
cisco:email_security_appliance_firmware
cisco:web_security_appliance

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3395
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3395

Check your stack JSON