[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fH2LChleRdMbM4vl_YlWpT95IkkTK1MP7b52SLu4M8RM":3,"g5a-risk:CVE-2019-1632":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":15,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":61,"references":62,"referencesCount":61,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":15,"otxData":15,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":125,"notableEvents":126},"CVE-2019-1632","What is CVE-2019-1632?","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to use a web browser and the privileges of the user to perform arbitrary actions on the affected device.","A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduc...","2019-06-20T03:15:11.79","2019-10-09T23:47:33.457",8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","REQUIRED","UNCHANGED","HIGH",2.1,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":37},"ykramarz@cisco.com","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N","NONE",4.6,"MEDIUM",2.5,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":36,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":36,"Authentication":43,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6,6.8,6.4,0.0054,[48,48,48,48,48,48,48],"High",[52,57],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"cisco","integrated_management_controller","-","cpe:2.3:a:cisco:integrated_management_controller:-:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":59,"criteria":60,"vulnerable":4},"unified_computing_system","4.0\\(1c\\)hs3","cpe:2.3:a:cisco:unified_computing_system:4.0\\(1c\\)hs3:*:*:*:*:*:*:*",2,[63,69],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108858","Securityfocus",[67,68],"Third Party Advisory","VDB Entry",{"url":70,"source":71,"tags":72},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190619-imc-csrf","Cisco",[73],"Vendor Advisory",[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2019-1632? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1632, a high severity cyber security vulnerability from 2019. A vulnerability in the web-based management interface of Cis...","CVE-2019-1632, CVE-2019-1632 vulnerability, CVE-2019-1632 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, integrated_management_controller vulnerability, unified_computing_system vulnerability","\u002Fwhat-is\u002Fcve-2019-1632",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1632","Cybersecurity","CVE-2019-1632, CVE-2019-1632 vulnerability, CVE-2019-1632 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,119],{"Operator":15,"Negate":15,"Nodes":113},[114],{"Operator":115,"Negate":15,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":118,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8ED6DD88-BC2C-41F6-B78A-3786817A73D6",{"Operator":15,"Negate":15,"Nodes":120},[121],{"Operator":115,"Negate":15,"CPEMatch":122},[123],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":124,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"39F8601E-730B-489B-AD2A-FD10FAF28595",[],[],{"lastModified":11,"cacheTime":128,"version":41},1792361888488,{"score":130,"band":131,"action":132,"scoredAt":133},46,"Medium","Plan remediation","2026-10-16T06:46:22.586996+00:00"]