CVE-2016-6454
published 2016-11-03CVE-2016-6454: A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an…
PriorityP431medium6.5CVSS 3.0
AVNACLPRNUIRSUCNIHAN
EPSS
0.50%
39.7th percentile
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | hosted_collaboration_mediation_fulfillment | — | — |
| cisco | hosted_collaboration_mediation_fulfillment | — | — |
| cisco | hosted_collaboration_mediation_fulfillment | — | — |
| cisco | hosted_collaboration_mediation_fulfillment | — | — |
| cisco | hosted_collaboration_mediation_fulfillment | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_cisco4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4882-p655-4rfx: A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow
ghsa_unreviewed·2022-05-17
CVE-2016-6454 [MEDIUM] CWE-352 GHSA-4882-p655-4rfx: A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).
Cisco
Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
vendor_cisco·2016-10-26·CVSS 4.3
CVE-2016-6454 [MEDIUM] CWE-352 Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions.
The vulnerability is due to a lack of CSRF protections by an affected device. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to submit arbitrary requests to the affected device via the web browser with the privileges of the user.
More information can be found at the following link: https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF)
Cisco has not released software updates that add
Cisco
Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
vendor_cisco
CVE-2016-6454 Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
CVE-2016-6454: Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to a lack of CSRF protections by an affected device. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to submit arbitrary requests to the affected device via the web browser with the privileges of the user. More information can be found at the following link: https://www.owasp.org/index.php/Cross-Site_Request_Forgery_(CSRF) Cisco has not released software updat
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-11-03
Published