CVE-2016-1373

HIGH

Cisco Finesse 8.5(1)-11.0(1) - Server-Side Request Forgery via Gadgets-Integration API

Title source: llm
STIX 2.1

Description

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1035756

Scores

CVSS v3 8.6
EPSS 0.0106
EPSS Percentile 61.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N

Details

Status published
Products (31)
cisco/finesse 8.5\(1\)_base
cisco/finesse 8.5\(2\)_base
cisco/finesse 8.5\(3\)_base
cisco/finesse 8.5\(4\)_base
cisco/finesse 8.5\(5\)_base
cisco/finesse 8.6\(1\)_base
cisco/finesse 9.0\(1\)_base
cisco/finesse 9.0\(2\)_base
cisco/finesse 9.1\(1\)_base
cisco/finesse 9.1\(1\)_es1
... and 21 more
Published May 05, 2016
Tracked Since Feb 18, 2026