{"api_version":"1","generated_at":"2026-07-23T14:25:54+00:00","cve":"CVE-2014-1473","urls":{"html":"https://cve.report/CVE-2014-1473","api":"https://cve.report/api/cve/CVE-2014-1473.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-1473","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-1473"},"summary":{"title":"CVE-2014-1473","description":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the \"response web page.\"","state":"PUBLISHED","assigner":"mitre","published_at":"2014-01-16 05:05:26","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-352","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://secunia.com/advisories/56394","name":"http://secunia.com/advisories/56394","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Security Advisory SA56394 - McAfee Vulnerability Manager Cross-Site Scripting and Cross-Site Request Forgery Vulnerabilities - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061","name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"McAfee KnowledgeBase - McAfee Security Bulletin – McAfee Vulnerability Manager hotfixes remediate XSS and CSRF vulnerabilities reported by NATO","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90245","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90245","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://osvdb.org/101939","name":"http://osvdb.org/101939","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/64795","name":"http://www.securityfocus.com/bid/64795","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"McAfee Vulnerability Manager Cross Site Scripting and Cross Site Request Forgery Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1029591","name":"http://www.securitytracker.com/id/1029591","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"McAfee Vulnerability Manager Input Validation Flaw Permits Cross-Site Scripting and Cross-Site Request Forgery Attacks - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1473","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1473","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"1473","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"vulnerability_manager","cpe6":"7.0.11","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1473","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"vulnerability_manager","cpe6":"7.5.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"1473","vulnerable":"1","versionEndIncluding":"7.5.5","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mcafee","cpe5":"vulnerability_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2014","cve_id":"1473","cve":"CVE-2014-1473","epss":"0.002690000","percentile":"0.503130000","score_date":"2026-05-03","updated_at":"2026-05-04 00:13:06"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T09:42:35.441Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"56394","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/56394"},{"name":"64795","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/64795"},{"name":"1029591","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1029591"},{"name":"mcafee-vm-unspec-csrf(90245)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90245"},{"name":"101939","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://osvdb.org/101939"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2014-01-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the \"response web page.\""}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-28T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"56394","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/56394"},{"name":"64795","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/64795"},{"name":"1029591","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1029591"},{"name":"mcafee-vm-unspec-csrf(90245)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90245"},{"name":"101939","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://osvdb.org/101939"},{"tags":["x_refsource_CONFIRM"],"url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-1473","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the \"response web page.\""}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"56394","refsource":"SECUNIA","url":"http://secunia.com/advisories/56394"},{"name":"64795","refsource":"BID","url":"http://www.securityfocus.com/bid/64795"},{"name":"1029591","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1029591"},{"name":"mcafee-vm-unspec-csrf(90245)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/90245"},{"name":"101939","refsource":"OSVDB","url":"http://osvdb.org/101939"},{"name":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061","refsource":"CONFIRM","url":"https://kc.mcafee.com/corporate/index?page=content&id=SB10061"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-1473","datePublished":"2014-01-16T02:00:00.000Z","dateReserved":"2014-01-15T00:00:00.000Z","dateUpdated":"2024-08-06T09:42:35.441Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-01-16 05:05:26","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-352","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:vulnerability_manager:*:*:*:*:*:*:*:*","versionEndIncluding":"7.5.5","matchCriteriaId":"B3F1D142-EABA-4554-AFD6-6962BDA86D15"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:vulnerability_manager:7.0.11:*:*:*:*:*:*:*","matchCriteriaId":"4227EA74-8DAA-43B4-8F00-8DC147C19687"},{"vulnerable":true,"criteria":"cpe:2.3:a:mcafee:vulnerability_manager:7.5.4:*:*:*:*:*:*:*","matchCriteriaId":"A3D5C396-D66E-4976-AB79-71D828EB541C"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"1473","Ordinal":"1","Title":"CVE-2014-1473","CVE":"CVE-2014-1473","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"1473","Ordinal":"1","NoteData":"Multiple cross-site request forgery (CSRF) vulnerabilities in the Enterprise Manager in McAfee Vulnerability Manager (MVM) 7.5.5 and earlier allow remote attackers to hijack the authentication of users for requests that modify HTML via unspecified vectors related to the \"response web page.\"","Type":"Description","Title":"CVE-2014-1473"},{"CveYear":"2014","CveId":"1473","Ordinal":"2","NoteData":"2014-01-15","Type":"Other","Title":"Published"},{"CveYear":"2014","CveId":"1473","Ordinal":"3","NoteData":"2017-08-28","Type":"Other","Title":"Modified"}]}}}