CVE-2016-1373: cisco finesse
Vulnerability summary
CVE-2016-1373 is a high (CVSS 8.6) vulnerability in cisco finesse. EPSS estimates a 1.06% chance of exploitation in the next 30 days, higher than 64% of scored vulnerabilities.
Timeline
- 05-05-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The gadgets-integration API in Cisco Finesse 8.5(1) through 8.5(5), 8.6(1), 9.0(1), 9.0(2), 9.1(1), 9.1(1)SU1, 9.1(1)SU1.1, 9.1(1)ES1 through 9.1(1)ES5, 10.0(1), 10.0(1)SU1, 10.0(1)SU1.1, 10.5(1), 10.5(1)ES1 through 10.5(1)ES4, 10.5(1)SU1, 10.5(1)SU1.1, 10.5(1)SU1.7, 10.6(1), 10.6(1)SU1, 10.6(1)SU2, and 11.0(1) allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCuw86623.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.06%
Chance of exploitation in the next 30 days
Percentile
64%
Versus all other CVEs
30-day change
0.00 pp
From 1.06% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- finesse8.5\(1\)_base | 8.5\(2\)_base | 8.5\(3\)_base | 8.5\(4\)_base | 8.5\(5\)_base | 8.6\(1\)_base | 9.0\(1\)_base | 9.0\(2\)_base | 9.1\(1\)_base | 9.1\(1\)_es1 | 9.1\(1\)_es2 | 9.1\(1\)_es3 | 9.1\(1\)_es4 | 9.1\(1\)_es5 | 9.1\(1\)_su1 | 9.1\(1\)_su1.1 | 10.0\(1\)_base | 10.0\(1\)_su1 | 10.0\(1\)_su1.1 | 10.5\(1\)_base | 10.5\(1\)_es1 | 10.5\(1\)_es2 | 10.5\(1\)_es3 | 10.5\(1\)_es4 | 10.5\(1\)_su1 | 10.5\(1\)_su1.1 | 10.5\(1\)_su1.7 | 10.6\(1\)_base | 10.6\(1\)_su1 | 10.6\(1\)_su2 | 11.0\(1\)_base
1 vendor · 1 product
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160504-finesseVendor AdvisoryX Refsource CISCO