CVE-2015-4593

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers…

published January 10, 2017

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers to hijack the authentication of content administrators for requests that could lead to the creation, modification and deletion of users, appointments and employees.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03355 · 88.6th percentile
Published
2017-01-10T15:00Z
EPSS history
Timeline
  • 10 JAN 15:00Z
    eClinicalWorks Population Health (CCMR) suffers from a cross-site request forgery (CSRF) vulnerability in portalUserService.jsp which allows remote attackers…
    cvelistv5