CVE-2016-9210

published 2016-12-14

CVE-2016-9210: A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote…

high 7.5 CVSS 3.0

AV N AC L PR N UI N S U C N I N A H

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.168) 12.0(0.98000.178) 12.0(0.98000.399) 12.0(0.98000.510) 12.0(0.98000.536) 12.0(0.98500.7).

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	unified_communications_manager	—	—
cisco	unified_communications_manager_unified_reporting_upload_tool_directory	—	—

CWE-22