Cisco Hosted Collaboration Mediation Fulfillment 10.6(1).0

CPE Details

Cisco Hosted Collaboration Mediation Fulfillment 10.6(1).0
cisco
hosted_collaboration_mediation_fulfillment
10.6\(1\).0
2016-11-04
12h56 +00:00
2021-04-12
16h19 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\(1\).0:*:*:*:*:*:*:*

Informations

Vendor

cisco

Product

hosted_collaboration_mediation_fulfillment

Version

10.6\(1\).0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-1478 2021-05-06
12h41 +00:00		 A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system.
6.5
Medium
CVE-2020-3124 2020-09-23
00h25 +00:00		 A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protections by the affected software. An attacker could exploit this vulnerability by persuading a targeted user to click a malicious link. A successful exploit could allow the attacker to send arbitrary requests that could change the password of a targeted user. An attacker could then take unauthorized actions on behalf of the targeted user.
6.5
Medium
CVE-2020-3256 2020-05-06
16h41 +00:00		 A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to information that is stored on an affected system. To exploit this vulnerability, an attacker would need administrative privileges on the Cisco HCM-F Software. The vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information.
4.9
Medium
CVE-2016-6454 2016-11-03
20h00 +00:00		 A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).
6.5
Medium