CVE-2016-6464

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-14 · updated 2026-06-17
Weakness: CWE-200

Description

A vulnerability in the web management interface of the Cisco Unified Communications Manager IM and Presence Service could allow an unauthenticated, remote attacker to view information on web pages that should be restricted. More Information: CSCva49629. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(1.12000.2) 12.0(0.98000.181).

Affected products

Cisco Unified Communications Manager IM and Presence Service: 10.5(1), 10.5(2), 11.0(1), 11.5(1)

References

http://www.securityfocus.com/bid/94802
http://www.securitytracker.com/id/1037412
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ucm
http://www.securityfocus.com/bid/94802
http://www.securitytracker.com/id/1037412
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ucm

Get alerted when CVE-2016-6464 or the next vulnerability affects your stack