CVEvulnerability

CVE-2016-6461

5.9 MEDIUM Published 2016-11-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-11-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.9 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Weaknesses
CWE-20

Description

A vulnerability in the HTTP web-based management interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to inject arbitrary XML commands on the affected system. More Information: CSCva38556. Known Affected Releases: 9.1(6.10). Known Fixed Releases: 100.11(0.75) 100.15(0.137) 100.8(40.129) 96.2(0.95) 97.1(0.55) 97.1(12.7) 97.1(6.30).

Affected configurations

• cisco adaptive security appliance software 9.1\(7\)4 • cisco adaptive security appliance software 9.1\(7\)7 • cisco adaptive security appliance software 9.1\(7\)9 • cisco adaptive security appliance software 9.1\(7\)11 • cisco adaptive security appliance software 9.1\(7\)12 • cisco adaptive security appliance software 9.1.6.10 • cisco adaptive security appliance software 9.2\(0.0\) • cisco adaptive security appliance software 9.2\(0.104\) • cisco adaptive security appliance software 9.2\(3.1\) • cisco adaptive security appliance software 9.2.1 • cisco adaptive security appliance software 9.2.2 • cisco adaptive security appliance software 9.2.2.4 • cisco adaptive security appliance software 9.2.2.7 • cisco adaptive security appliance software 9.2.2.8 • cisco adaptive security appliance software 9.2.3 • cisco adaptive security appliance software 9.2.3.3 • cisco adaptive security appliance software 9.2.3.4 • cisco adaptive security appliance software 9.2.4 • cisco adaptive security appliance software 9.2.4.4 • cisco adaptive security appliance software 9.2.4.8 • cisco adaptive security appliance software 9.2.4.10 • cisco adaptive security appliance software 9.2.4.13 • cisco adaptive security appliance software 9.2.4.14 • cisco adaptive security appliance software 9.2.4.16 • cisco adaptive security appliance software 9.2.4.17 • cisco adaptive security appliance software 9.3\(1.50\) • cisco adaptive security appliance software 9.3\(1.105\) • cisco adaptive security appliance software 9.3\(2.100\) • cisco adaptive security appliance software 9.3\(2.243\) • cisco adaptive security appliance software 9.3.1 • cisco adaptive security appliance software 9.3.1.1 • cisco adaptive security appliance software 9.3.2 • cisco adaptive security appliance software 9.3.2.2 • cisco adaptive security appliance software 9.3.3 • cisco adaptive security appliance software 9.3.3.1 • cisco adaptive security appliance software 9.3.3.2 • cisco adaptive security appliance software 9.3.3.5 • cisco adaptive security appliance software 9.3.3.6 • cisco adaptive security appliance software 9.3.3.9 • cisco adaptive security appliance software 9.3.3.10 • cisco adaptive security appliance software 9.3.3.11 • cisco adaptive security appliance software 9.3.5 • cisco adaptive security appliance software 9.4.0.115 • cisco adaptive security appliance software 9.4.1 • cisco adaptive security appliance software 9.4.1.1 • cisco adaptive security appliance software 9.4.1.2 • cisco adaptive security appliance software 9.4.1.3 • cisco adaptive security appliance software 9.4.1.5 • cisco adaptive security appliance software 9.4.2 • cisco adaptive security appliance software 9.4.2.3 • cisco adaptive security appliance software 9.4.3 • cisco adaptive security appliance software 9.4.3.3 • cisco adaptive security appliance software 9.4.3.4 • cisco adaptive security appliance software 9.4.3.6 • cisco adaptive security appliance software 9.4.3.8 • cisco adaptive security appliance software 9.4.3.11 • cisco adaptive security appliance software 9.4.3.12 • cisco adaptive security appliance software 9.4.4 • cisco adaptive security appliance software 9.5.1 • cisco adaptive security appliance software 9.5.2 … and 3 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References