VULNERABILITY INTELLIGENCE

CVE-2015-6493

CVSS score6.8 MEDIUM

EPSS probability1.32%

CISA KEVNot currently listed

Published2015-10-28

Last modified2026-06-17

CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.

Weakness classification

CWE-352: Cross-Site Request Forgery (CSRF)

Primary references

ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource