What’s Vulnerable › Vulnerabilities

CVE-2015-3140

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-11-21 · updated 2026-06-17
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Synametrics Technologies SynaMan before 3.5 Build 1451, Syncrify before 3.7 Build 856, and SynTail before 1.5 Build 567

Affected products

• Synametrics Synaman: 1.0-build786, 1.0-build805, 1.1-build972, 2.0-build1185, 2.1-build1202, 2.2-build1205 (+38)
• Synametrics Syncrify: 1.3-build352, 1.3-build369, 1.3-build372, 1.3-build375, 1.4-build379, 1.4-build393 (+46)
• Synametrics Syntail: 1.0-build420, 1.1-build429, 1.2-build445, 1.5-build561

References

• http://web.synametrics.com/SynamanVersionHistory.htm
• https://web.synametrics.com/SyncrifyVersionHistory.htm
• https://web.synametrics.com/SyntailVersionHistory.htm
• http://web.synametrics.com/SynamanVersionHistory.htm
• https://web.synametrics.com/SyncrifyVersionHistory.htm
• https://web.synametrics.com/SyntailVersionHistory.htm

Get alerted when CVE-2015-3140 or the next vulnerability affects your stack