Skip to content
OpenAdvisories
Unscored CVE-2016-6461 EUVD-2016-7384GHSA-mr8c-v6w9-mj48

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, r…

Published Nov 19, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10). Known Fixed Releases: 100.11(0.75) 100.15(0.137) 100.8(40.129) 96.2(0.95) 97.1(0.55) 97.1(12.7) 97.1(6.30).

Affected products

VendorProductAffectedFixed
— Cisco Adaptive Security Appliance (ASA) 9.1(6.10) Cisco Adaptive Security Appliance (ASA) 9.1(6.10) —

References