Cisco Hosted Collaboration Mediation Fulfillment vulnerabilities

8 CVEs affecting Cisco Hosted Collaboration Mediation Fulfillment, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1478, published 2021-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-6371, published 2016-09-12. High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote attackers to write to arbitrary files via a…
CVE-2016-6370, published 2016-09-12. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allows remote authenticated users to read arbitrary files via a…
CVE-2017-6779, published 2018-06-07. High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days. Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to…
CVE-2020-3256, published 2020-05-06. Medium severity, CVSS 4.9. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) Software could allow an authenticated, remote attacker to gain read access to…
CVE-2021-1478, published 2021-05-06. Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM…
CVE-2020-3124, published 2020-09-23. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…
CVE-2018-15401, published 2018-10-05. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Hosted Collaboration Mediation Fulfillment could allow an unauthenticated, remote attacker to conduct a cross-site request forgery…
CVE-2016-6454, published 2016-11-03. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute…