CVE-2009-4877
N/A
Published: May 26, 2010 at 06:00 PM UTC
Updated: June 16, 2026 at 11:14 PM UTC
1 product affected across 1 vendorWebgui
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.6%
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in WebGUI before 7.7.14 allow remote attackers to hijack the authentication of users for unspecified requests via unknown vectors.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 7.7.137.3.127.3.137.3.147.3.157.3.167.3.177.3.187.3.197.3.207.3.217.3.227.4.07.4.17.4.107.4.117.4.127.4.137.4.147.4.157.4.167.4.177.4.187.4.197.4.27.4.207.4.217.4.227.4.237.4.247.4.257.4.267.4.277.4.287.4.297.4.37.4.307.4.317.4.327.4.337.4.347.4.357.4.367.4.377.4.387.4.397.4.47.4.407.4.57.4.67.4.77.4.87.4.97.5.07.5.17.5.107.5.117.5.137.5.147.5.157.5.167.5.177.5.187.5.197.5.27.5.207.5.217.5.227.5.237.5.247.5.257.5.267.5.277.5.287.5.297.5.37.5.307.5.317.5.327.5.337.5.347.5.357.5.367.5.377.5.387.5.47.5.407.5.40.17.5.57.5.67.5.77.5.87.5.97.6.17.6.107.6.117.6.127.6.137.6.147.6.157.6.167.6.177.6.187.6.197.6.27.6.207.6.217.6.227.6.237.6.247.6.257.6.267.6.277.6.287.6.297.6.37.6.307.6.317.6.327.6.337.6.347.6.357.6.35.17.6.35.27.6.47.6.57.6.67.6.77.6.87.6.97.7.17.7.107.7.117.7.127.7.27.7.37.7.47.7.57.7.67.7.77.7.87.7.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/35775x_refsource_CONFIRM
Source: [email protected]
http://sourceforge.net/project/shownotes.php?release_id=695900VDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/51668Quick Info
StatusMODIFIED
CWE
CWE-352
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card