CVE-2016-6461

2016-11-1902:45:00

cisco

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.003

Percentile

69.7%

JSON

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10). Known Fixed Releases: 100.11(0.75) 100.15(0.137) 100.8(40.129) 96.2(0.95) 97.1(0.55) 97.1(12.7) 97.1(6.30).

CNA Affected

[
  {
    "product": "Cisco Adaptive Security Appliance (ASA) 9.1(6.10)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Adaptive Security Appliance (ASA) 9.1(6.10)"
      }
    ]
  }
]