CVE-2016-6364

HOCH 7.5CVE-2016-6364 · Published 23/08/2016 · updated 17/06/2026

Kurz gesagt

CVE-2016-6364 ist eine Schwachstelle (HOCH (CVSS 7.5)) in unified communications manager (cisco).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.2%, höher als bei 82.3% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
unified communications manager cisco	`= 11.5.0`	No fix yet

Description

The User Data Services (UDS) API implementation in Cisco Unified Communications Manager 11.5 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified API calls, aka Bug ID CSCux67855.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-ucm · Vendor Advisory
securityfocus.com/bid/92517 · Third Party Advisory
securitytracker.com/id/1036650 · Third Party Advisory

Weitere Schwachstellen in unified communications manager

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

unified communications manager

cisco

= 11.5.0

No fix yet

Weitere Schwachstellen in unified communications manager

Alle anzeigen →