[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fBzgai1BfUin3FWybT-FP4ZTSaXotalhP4T7rheHgAY0":3,"g5a-risk:CVE-2016-6454":131},{"success":4,"data":5,"meta":129},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":29,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":62,"references":63,"referencesCount":62,"weaknesses":77,"weaknessesCount":86,"isActivelyExploited":42,"cisaInfo":29,"otxData":29,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":127,"notableEvents":128},"CVE-2016-6454","What is CVE-2016-6454?","A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an unauthenticated, remote attacker to execute unwanted actions. More Information: CSCva54241. Known Affected Releases: 11.5(1). Known Fixed Releases: 11.5(0.98000.216).","A cross-site request forgery (CSRF) vulnerability in the web interface of the Cisco Hosted Collaboration Mediation Fulfillment application could allow an una...","2016-11-03T21:59:10.013","2026-06-17T00:51:03.58",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":32,"CVSSMetricV40":43},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":30,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":27,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.0","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH","MEDIUM",null,2.8,3.6,[33],{"Source":18,"Type":19,"CVSSData":34,"BaseSeverity":28,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":42,"ObtainAllPrivilege":42,"ObtainUserPrivilege":42,"ObtainOtherPrivilege":42,"UserInteractionRequired":4},{"Version":35,"VectorString":36,"AccessVector":22,"AccessComplexity":28,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":37,"AvailabilityImpact":24,"BaseScore":38,"BaseSeverity":39,"Exploitability":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"CollateralDamagePotential":29,"TargetDistribution":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"EnvironmentalScore":29},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",4.3,"",8.6,2.9,false,[],0.00496,[44,44,44,44,44,44,44],"Medium",[48,53,56,59],{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"cisco","hosted_collaboration_mediation_fulfillment","10.6\\(1\\).0","cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(1\\).0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":54,"criteria":55,"vulnerable":4},"10.6\\(2\\).0","cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(2\\).0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":57,"criteria":58,"vulnerable":4},"10.6\\(3\\).0","cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:10.6\\(3\\).0:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":60,"criteria":61,"vulnerable":4},"11.5\\(1\\).0","cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:11.5\\(1\\).0:*:*:*:*:*:*:*",4,[64,68,73,75],{"url":65,"source":66,"tags":67},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F93916","Securityfocus",[],{"url":69,"source":70,"tags":71},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20161026-hcmf","Cisco",[72],"Vendor Advisory",{"url":65,"source":66,"tags":74},[],{"url":69,"source":70,"tags":76},[72],[78],{"id":79,"name":80,"description":81,"extendedDescription":82,"status":83,"abstraction":84,"structure":85},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2016-6454? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-6454, a medium severity cyber security vulnerability from 2016. A cross-site request forgery (CSRF) vulnerability in the w...","CVE-2016-6454, CVE-2016-6454 vulnerability, CVE-2016-6454 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, cisco security, hosted_collaboration_mediation_fulfillment vulnerability","\u002Fwhat-is\u002Fcve-2016-6454",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-6454","Cybersecurity","CVE-2016-6454, CVE-2016-6454 vulnerability, CVE-2016-6454 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":29,"Negate":29,"Nodes":115},[116],{"Operator":117,"Negate":42,"CPEMatch":118},"OR",[119,121,123,125],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":120,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"ACED1448-D3CF-4180-B526-54ED11F10E5D",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":122,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"524D6066-8A7B-44F4-B7C8-AC6E0B3FCBEE",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":124,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"2DFD1744-3C16-4998-81D2-C4C3B4E0BCBF",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":126,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A51398F9-3A59-440C-91AD-44B8F7B0389D",[],[],{"lastModified":11,"cacheTime":130,"version":35},1793219582036,{"score":132,"band":133,"action":134,"scoredAt":135},23,"Low","Monitor","2026-07-01T10:20:03.174004+00:00"]