CVE-2016-9092: symantec corporation content analysis (ca) Cross-Site Request Forgery (CSRF)
Vulnerability summary
CVE-2016-9092 is a high (CVSS 8.8) Cross-Site Request Forgery (CSRF) vulnerability in symantec corporation content analysis (ca). EPSS estimates a 0.57% chance of exploitation in the next 30 days, higher than 46% of scored vulnerabilities.
Timeline
- 11-05-2017PublishedVulnerability first disclosed.
- 17-09-2024Last modifiedVulnerability information updated.
Description
The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a cross-site request forging (CSRF) vulnerability. A remote attacker can use phishing or other social engineering techniques to access the management console with the privileges of an authenticated administrator user.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.57%
Chance of exploitation in the next 30 days
Percentile
46%
Versus all other CVEs
30-day change
0.00 pp
From 0.57% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Symantec2 products
- content_analysis1.3 | 2.1
- mail_threat_defense1.1
Symantec corporation2 products
- content analysis (ca)1.3 | 2.x prior to 2.2.1.1
- mail threat defense (mtd)1.1
2 vendors · 4 products
References
2 links- www.symantec.com/security-center/network-protection-security-advisories/SA149X Refsource CONFIRMVendor Advisory