CVE-2016-6454

A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).

Published: Nov 3, 2016
Updated: Apr 13, 2023
CVE: CVE-2016-6454
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 6.5
AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-352

Affected Software
References

Software	From	Fixed in
cisco / hosted_collaboration_mediation_fulfillment	10.6(3).0	10.6(3).0.x
cisco / hosted_collaboration_mediation_fulfillment	10.6(1).0	10.6(1).0.x
cisco / hosted_collaboration_mediation_fulfillment	11.5(1).0	11.5(1).0.x
cisco / hosted_collaboration_mediation_fulfillment	10.6(2).0	10.6(2).0.x

http://www.securityfocus.com/bid/93916
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-hcmf

Vulnerability Database

CVE-2016-6454

Deep Security Visibility Without the Complexity