CVE-2016-6370: Cisco Hosted Collaboration Mediation Fulfillment

Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a crafted pathname in an HTTP request, aka Bug ID CSCuz27255.

Affected products

• Cisco Hosted Collaboration Mediation Fulfillment: version 10.6(1)_base only; version 10.6(2)_base only; version 10.6(3)_base only

Published 2016-09-12. Last modified 2026-06-17.