CVE-2016-6454

MEDIUM

Cisco Hosted Collaboration Mediation Fulfillment - CSRF

Title source: llm
STIX 2.1

Description

A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/93916

Scores

CVSS v3 6.5
EPSS 0.0050
EPSS Percentile 39.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Details

CWE
CWE-352
Status published
Products (5)
cisco/hosted_collaboration_mediation_fulfillment 10.6\(1\).0
cisco/hosted_collaboration_mediation_fulfillment 10.6\(2\).0
cisco/hosted_collaboration_mediation_fulfillment 10.6\(3\).0
cisco/hosted_collaboration_mediation_fulfillment 11.5\(1\).0
n/a/Cisco Hosted Collaboration Mediation Fulfillment before 11.5(0.98000.216) Cisco Hosted Collaboration Mediation Fulfillment before 11.5(0.98000.216)
Published Nov 03, 2016
Tracked Since Feb 18, 2026