CVE-2016-1317

Severity: medium (CVSS 4.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-02-09 · updated 2026-06-17
Weakness: CWE-200

Description

Cisco Unified Communications Manager 11.5(0.98000.480) allows remote authenticated users to obtain sensitive database table-name and entity-name information via a direct request to an unspecified URL, aka Bug ID CSCuy11098.

Affected products

Zyxel GS1900-10HP firmware: before 2.50\(aazi.0\)c0 — fixed in 2.50\(aazi.0\)c0

How to fix

Upgrade to a fixed version: Zyxel GS1900-10HP firmware 2.50\(aazi.0\)c0. Check the vendor advisory for mitigations.

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm
http://www.securitytracker.com/id/1034957
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-201600208-ucm
http://www.securitytracker.com/id/1034957

Get alerted when CVE-2016-1317 or the next vulnerability affects your stack