What is CVE-2016-1373?

CVE-2016-1373 is a high-severity vulnerability in Cisco Finesse. CVSS score: 8.6/10. Published 2016-05-05.

How severe is CVE-2016-1373?

High severity. CVSS v3 base score is 8.6 out of 10.

Vulnerability in Cisco Finesse

CVE-2016-1373

The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623.

EPSS: 0.011 (62.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.6 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N.

Affected products

Cisco Finesse — versions 9.1(1)_es1, 10.5(1)_es1, 8.5(3)_base
N/a — versions n/a

References

psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2016-1373?: CVE-2016-1373 is a high-severity vulnerability in Cisco Finesse. CVSS score: 8.6/10. Published 2016-05-05.
How severe is CVE-2016-1373?: High severity. CVSS v3 base score is 8.6 out of 10.