CVE-2016-6454

MEDIUM

Cisco Hosted Collaboration Mediation Fulfillment - CSRF

Title source: llm

Description

A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).

References (2)

[Vendor Advisory] https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-hcmf

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/93916

Scores

CVSS v3 6.5

EPSS 0.0015

EPSS Percentile 36.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Classification

CWE

CWE-352

Status published

Affected Products (5)

cisco/hosted_collaboration_mediation_fulfillment

n/a/Cisco Hosted Collaboration Mediation Fulfillment before 11.5(0.98000.216) < Cisco Hosted Collaboration Mediation Fulfillment before 11.5(0.98000.216)

Timeline

Published Nov 03, 2016

Tracked Since Feb 18, 2026