CVE-2014-3267: Cross-site request forgery (CSRF) vulnerability in the web framework in Cisco Security Manager 4.6 and earl...

Security readout for executives and security teams

CVE-2014-3267 is a CSRF issue in Cisco Security Manager 4.6 and earlier. If an authenticated user’s browser can be abused, requests may make unspecified changes in the application. The public bundle does not provide CVSS, exact changed actions, or confirmed exploitation. Exposure is most likely where Cisco Security Manager 4.6 or earlier is deployed and its web interface is reachable by administrators’ browsers. Risk increases if the management interface is broadly reachable or used from general-purpose browsing environments. Treat this as a management-plane weakness requiring timely review, not emergency response based on current evidence. Prioritize if Cisco Security Manager is still in use, externally reachable, or administered from shared browsing environments. Mitigation focus: Review Cisco’s security notice for fixed versions or supported workarounds.; Upgrade Cisco Security Manager if Cisco guidance identifies a corrected release.; Restrict access to the Cisco Security Manager web interface to trusted management networks..

Prepared

Jun 14, 2026, 14:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.