CVE-2016-6371: Cisco Hosted Collaboration Mediation Fulfillment

High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717.

Affected products

• Cisco Hosted Collaboration Mediation Fulfillment: version 10.6(1)_base only; version 10.6(2)_base only; version 10.6(3)_base only

Published 2016-09-12. Last modified 2026-06-17.