CVE Vulnerabilities

CVE-2016-1373

Published: May 05, 2016 | Modified: Dec 01, 2016
CVSS 3.x
8.6
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623.

Affected Software

Name Vendor Start Version End Version
Finesse Cisco 8.5(1)_base (including) 8.5(1)_base (including)
Finesse Cisco 8.5(2)_base (including) 8.5(2)_base (including)
Finesse Cisco 8.5(3)_base (including) 8.5(3)_base (including)
Finesse Cisco 8.5(4)_base (including) 8.5(4)_base (including)
Finesse Cisco 8.5(5)_base (including) 8.5(5)_base (including)
Finesse Cisco 8.6(1)_base (including) 8.6(1)_base (including)
Finesse Cisco 9.0(1)_base (including) 9.0(1)_base (including)
Finesse Cisco 9.0(2)_base (including) 9.0(2)_base (including)
Finesse Cisco 9.1(1)_base (including) 9.1(1)_base (including)
Finesse Cisco 9.1(1)_es1 (including) 9.1(1)_es1 (including)
Finesse Cisco 9.1(1)_es2 (including) 9.1(1)_es2 (including)
Finesse Cisco 9.1(1)_es3 (including) 9.1(1)_es3 (including)
Finesse Cisco 9.1(1)_es4 (including) 9.1(1)_es4 (including)
Finesse Cisco 9.1(1)_es5 (including) 9.1(1)_es5 (including)
Finesse Cisco 9.1(1)_su1 (including) 9.1(1)_su1 (including)
Finesse Cisco 9.1(1)_su1.1 (including) 9.1(1)_su1.1 (including)
Finesse Cisco 10.0(1)_base (including) 10.0(1)_base (including)
Finesse Cisco 10.0(1)_su1 (including) 10.0(1)_su1 (including)
Finesse Cisco 10.0(1)_su1.1 (including) 10.0(1)_su1.1 (including)
Finesse Cisco 10.5(1)_base (including) 10.5(1)_base (including)
Finesse Cisco 10.5(1)_es1 (including) 10.5(1)_es1 (including)
Finesse Cisco 10.5(1)_es2 (including) 10.5(1)_es2 (including)
Finesse Cisco 10.5(1)_es3 (including) 10.5(1)_es3 (including)
Finesse Cisco 10.5(1)_es4 (including) 10.5(1)_es4 (including)
Finesse Cisco 10.5(1)_su1 (including) 10.5(1)_su1 (including)
Finesse Cisco 10.5(1)_su1.1 (including) 10.5(1)_su1.1 (including)
Finesse Cisco 10.5(1)_su1.7 (including) 10.5(1)_su1.7 (including)
Finesse Cisco 10.6(1)_base (including) 10.6(1)_base (including)
Finesse Cisco 10.6(1)_su1 (including) 10.6(1)_su1 (including)
Finesse Cisco 10.6(1)_su2 (including) 10.6(1)_su2 (including)
Finesse Cisco 11.0(1)_base (including) 11.0(1)_base (including)

References