CVE-2016-6454: CSRF
A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6454?
CVE-2016-6454 has a medium severity rating due to its potential for unauthorized actions via CSRF.
How do I fix CVE-2016-6454?
To fix CVE-2016-6454, it is recommended to upgrade to a fixed release version of the affected Cisco Hosted Collaboration Mediation Fulfillment application.
Which versions are affected by CVE-2016-6454?
CVE-2016-6454 affects Cisco Hosted Collaboration Mediation Fulfillment versions 10.6(1.0), 10.6(2.0), 10.6(3.0), and 11.5(1.0).
Can CVE-2016-6454 be exploited remotely?
Yes, CVE-2016-6454 can be exploited remotely by an unauthenticated attacker.
What actions can be executed by exploiting CVE-2016-6454?
Exploiting CVE-2016-6454 allows attackers to perform unwanted actions on the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application.