CVE-2016-6454

Опубликовано: 03 нояб. 2016

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\).0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(2\).0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(3\).0:*:*:*:*:*:*:*

cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\(1\).0:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00155

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-4882-p655-4rfx