Application-hosting Framework

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2016-6412	Cisco Systems, Inc. Cisco iOS	Med	0.42	6.5	0.01		Sep 24, 2016	The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.
CVE-2016-6410	Cisco Systems, Inc. Cisco iOS	Med	0.42	6.5	0.01		Sep 24, 2016	The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856.

CVE-2016-6412MedSep 24, 2016
Cisco Systems, Inc.
Cisco iOS
risk 0.42cvss 6.5epss 0.01
The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.
CVE-2016-6410MedSep 24, 2016
Cisco Systems, Inc.
Cisco iOS
risk 0.42cvss 6.5epss 0.01
The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows remote authenticated users to read arbitrary files via unspecified vectors, aka Bug ID CSCuy19856.