CVSS: 6.5EPSS: 0%CPEs: 4EXPL: 0CVE-2016-6454
https://notcve.org/view.php?id=CVE-2016-6454
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216). Una vulnerabilidad de CSRF en la interfaz web de la aplicación Cisco Hosted Collaboration Mediation Fulfillment podría permitir a un atacante remoto no autenticado ejecutar acciones no deseadas. • http://www.securityfocus.com/bid/93916 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-hcmf • CWE-352: Cross-Site Request Forgery (CSRF) •
CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0CVE-2016-6370
https://notcve.org/view.php?id=CVE-2016-6370
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255. Vulnerabilidad de salto de directorio en la interfaz web en Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) y versiones anteriores permite a usuarios remotos autenticados leer archivos arbitrarios a través de un nombre de ruta manipulado en una petición HTTP, vulnerabilidad también conocida como Bug ID CSCuz27255. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-hcm http://www.securityfocus.com/bid/92704 http://www.securitytracker.com/id/1036718 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2016-6371
https://notcve.org/view.php?id=CVE-2016-6371
Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717. Vulnerabilidad de salto de directorio en la interfaz web en Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) y versiones anteriores permite a atacantes remotos escribir en archivos arbitrarios a través de una URL manipulada, vulnerabilidad también conocida como Bug ID CSCuz64717. • http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-hcmf http://www.securityfocus.com/bid/92705 http://www.securitytracker.com/id/1036719 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •