{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-05-04T00:00:00", "descriptions": [{"lang": "en", "value": "The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-29T16:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "1035756", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1035756"}, {"name": "20160504 Cisco Finesse HTTP Request Processing Server-Side Request Forgery Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesse"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2016-1373", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1035756", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035756"}, {"name": "20160504 Cisco Finesse HTTP Request Processing Server-Side Request Forgery Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesse"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:55:14.323Z"}, "title": "CVE Program Container", "references": [{"name": "1035756", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1035756"}, {"name": "20160504 Cisco Finesse HTTP Request Processing Server-Side Request Forgery Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesse"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2016-1373", "datePublished": "2016-05-05T21:00:00", "dateReserved": "2016-01-04T00:00:00", "dateUpdated": "2024-08-05T22:55:14.323Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:finesse:8.5\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "93A74FB6-308B-440F-A713-B006599B0C1D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:8.5\\(2\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "64B9B388-9F1C-47D9-BD82-FA132E936521", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:8.5\\(3\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "67BB5F85-5EE6-46A9-A071-A4AB99B53927", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:8.5\\(4\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "154B9756-918E-4CA4-A2FA-F9A92EF3440A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:8.5\\(5\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "1AAC47B7-EB35-400E-B9A8-F13620583F63", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:8.6\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "59B1767A-B4CB-45B7-A364-15C75016E74A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.0\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "4F31178A-E124-45CF-A284-E701C72A5D9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.0\\(2\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "87FC4450-21C6-4DB1-9D65-AFFDB6C33DF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "D0DB180E-703A-4EB7-922D-1B3CA1E4904A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_es1:*:*:*:*:*:*:*", "matchCriteriaId": "986D5ECE-89EF-45C0-A2C1-A33171B29155", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_es2:*:*:*:*:*:*:*", "matchCriteriaId": "8BF257E1-C6EC-4917-90A7-28D592B0123F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_es3:*:*:*:*:*:*:*", "matchCriteriaId": "2132A987-5A3F-44C8-815D-BC7246911C99", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_es4:*:*:*:*:*:*:*", "matchCriteriaId": "D00214A4-E9DF-4C66-AD16-D3AC583BFA8A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_es5:*:*:*:*:*:*:*", "matchCriteriaId": "EC791794-4890-40BF-A96F-FF93258885AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_su1:*:*:*:*:*:*:*", "matchCriteriaId": "39BC5752-1178-4E52-9BC3-20FAAD60D37D", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:9.1\\(1\\)_su1.1:*:*:*:*:*:*:*", "matchCriteriaId": "92B3FB8A-300F-462A-B6FB-68D2615EF229", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.0\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "839493EF-394B-4F61-A78F-E1825B4092F9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.0\\(1\\)_su1:*:*:*:*:*:*:*", "matchCriteriaId": "EDAAD5DF-0763-49C2-A5C6-831CFECEB633", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.0\\(1\\)_su1.1:*:*:*:*:*:*:*", "matchCriteriaId": "24AA0D47-CFCD-4191-A5F8-2A42A65D7835", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "22F2B8E7-53AD-457D-B3BF-B261C80BBD0E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_es1:*:*:*:*:*:*:*", "matchCriteriaId": "D37E02C3-B63F-43D9-AF7F-76609C424620", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_es2:*:*:*:*:*:*:*", "matchCriteriaId": "C869C393-AD1F-4334-92F6-F5CB11979EDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_es3:*:*:*:*:*:*:*", "matchCriteriaId": "7E80412C-6BFF-44D7-B3B6-D8CC19D93296", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_es4:*:*:*:*:*:*:*", "matchCriteriaId": "C3C8DA33-8104-414A-8C63-1405C6EEB362", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_su1:*:*:*:*:*:*:*", "matchCriteriaId": "523D9F1F-74BA-4DD7-BF9F-473643CA32C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_su1.1:*:*:*:*:*:*:*", "matchCriteriaId": "86356E8E-6751-4D5D-97C2-BC7180F7ED3B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.5\\(1\\)_su1.7:*:*:*:*:*:*:*", "matchCriteriaId": "12F677FF-1C9E-484A-A44B-8A4B74627579", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.6\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "316D6AAA-905B-4EE8-B170-B5385EEB1DC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.6\\(1\\)_su1:*:*:*:*:*:*:*", "matchCriteriaId": "C319E8AD-774D-42A4-8B00-DCBB30413072", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:10.6\\(1\\)_su2:*:*:*:*:*:*:*", "matchCriteriaId": "32B648DB-B8A7-40CC-B9CB-190D399C5BE4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:finesse:11.0\\(1\\)_base:*:*:*:*:*:*:*", "matchCriteriaId": "6F430C6D-24ED-4FB9-9F34-16F0A9CBEE2D", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623."}, {"lang": "es", "value": "La API gadgets-integration en Cisco Finesse 8.5(1) hasta la versi\u00f3n 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 hasta la versi\u00f3n 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 hasta la versi\u00f3n 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2 y 11.0(1) permite a atacantes remotos llevar a cabo ataques de falsificaci\u00f3n de peticiones del lado del servidor (SSRF) a trav\u00e9s de una petici\u00f3n manipulada, tambi\u00e9n conocido como Bug ID CSCuw86623."}], "evaluatorComment": "<a href=\"https://cwe.mitre.org/data/definitions/918.html\">CWE-918: Server-Side Request Forgery (SSRF)</a>", "id": "CVE-2016-1373", "lastModified": "2016-12-01T03:05:23.070", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-05-05T21:59:03.267", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesse"}, {"source": "ykramarz@cisco.com", "url": "http://www.securitytracker.com/id/1035756"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}