← Back

CVE-2016-6461

nvd nist
Published: Nov 19, 2016Modified: May 6, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10). Known Fixed Releases: 100.11(0.75) 100.15(0.137) 100.8(40.129) 96.2(0.95) 97.1(0.55) 97.1(12.7) 97.1(6.30).

Affected (63)

1 product
Configuration A
63 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 9.1.6.10
Version 9.1(7)11
Version 9.1(7)12
Version 9.1(7)4
Version 9.1(7)7
Version 9.1(7)9
Version 9.2.1
Version 9.2.2.4
Version 9.2.2.7
Version 9.2.2.8
Version 9.2.2
Version 9.2.3.3
Version 9.2.3.4
Version 9.2.3
Version 9.2.4.10
Version 9.2.4.13
Version 9.2.4.14
Version 9.2.4.16
Version 9.2.4.17
Version 9.2.4.4
Version 9.2.4.8
Version 9.2.4
Version 9.2(0.0)
Version 9.2(0.104)
Version 9.2(3.1)
Version 9.3.1.1
Version 9.3.1
Version 9.3.2.2
Version 9.3.2
Version 9.3.3.10
Version 9.3.3.11
Version 9.3.3.1
Version 9.3.3.2
Version 9.3.3.5
Version 9.3.3.6
Version 9.3.3.9
Version 9.3.3
Version 9.3.5
Version 9.3(1.105)
Version 9.3(1.50)
Version 9.3(2.100)
Version 9.3(2.243)
Version 9.4.0.115
Version 9.4.1.1
Version 9.4.1.2
Version 9.4.1.3
Version 9.4.1.5
Version 9.4.1
Version 9.4.2.3
Version 9.4.2
Version 9.4.3.11
Version 9.4.3.12
Version 9.4.3.3
Version 9.4.3.4
Version 9.4.3.6
Version 9.4.3.8
Version 9.4.3
Version 9.4.4
Version 9.5.1
Version 9.5.2.10
Version 9.5.2.14
Version 9.5.2.6
Version 9.5.2

References (6)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.