Hosted Collaboration Mediation Fulfillment vulnerabilities

Product

Hosted Collaboration Mediation Fulfillment

by Cisco · last CVE May 6, 2021

CVEs

On KEV

7.5

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 2Medium 6Low 0

Severity

All severities8 Critical0 High2 Medium6 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Hosted Collaboration Mediation Fulfillment to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2017-6779	7.5	2%	Jun 7	Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated,… Affected: 11.5 before 11.5\(3\); 9.5(1)
CVE-2016-6371	7.5	5%	Sep 12	Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to… Affected: 10.6(1)_base; 10.6(2)_base; 10.6(3)_base
CVE-2021-1478	6.5	1%	May 6	A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management… Affected: before 12.6
CVE-2020-3124	6.5	0%	Sep 23	A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: before 12.5\(1\)
CVE-2018-15401	6.5	0%	Oct 5	A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site… Affected: 11.5(2); 11.5(3); 12.5(1)
CVE-2016-6454	6.5	0%	Nov 3	A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote… Affected: 10.6(1).0; 10.6(2).0; 10.6(3).0; 11.5(1).0
CVE-2020-3256	4.9	1%	May 6	A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain… Affected: before 12.5\(1\)su2
CVE-2016-6370	4.3	2%	Sep 12	Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read… Affected: 10.6(1)_base; 10.6(2)_base; 10.6(3)_base