CVE-2016-6440

The Cisco Unified Communications Manager (CUCM) may be vulnerable to data that can be displayed inside an iframe within a web page, which in turn could lead to a clickjacking attack. More Information: CSCuz64683 CSCuz64698. Known Affected Releases: 11.0(1.10000.10), 11.5(1.10000.6), 11.5(0.99838.4). Known Fixed Releases: 11.0(1.22048.1), 11.5(0.98000.1070), 11.5(0.98000.284)11.5(0.98000.346), 11.5(0.98000.768), 11.5(1.10000.3), 11.5(1.10000.6), 11.5(2.10000.2).

• CWE-20

• http://www.securityfocus.com/bid/93521
• http://www.securitytracker.com/id/1037005
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-ucmVendor Advisory
• http://www.securityfocus.com/bid/93521
• http://www.securitytracker.com/id/1037005
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-ucmVendor Advisory

Published

Oct 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6434Cisco Firepower Management Center 6.0.1 has hardcoded databa…
• CVE-2016-6435The web console in Cisco Firepower Management Center 6.0.1 a…
• CVE-2016-6436Cross-site scripting (XSS) vulnerability in HostScan Engine …
• CVE-2016-6437A vulnerability in the SSL session cache management of Cisco…
• CVE-2016-6438A vulnerability in Cisco IOS XE Software running on Cisco cB…
• CVE-2016-6439A vulnerability in the detection engine reassembly of HTTP p…
• CVE-2016-6441A vulnerability in the Transaction Language 1 (TL1) code of …
• CVE-2016-6442A vulnerability in Cisco Finesse Agent and Supervisor Deskto…
• CVE-2016-6443A vulnerability in the Cisco Prime Infrastructure and Evolve…
• CVE-2016-6444A vulnerability in Cisco Meeting Server could allow an unaut…
• CVE-2016-6445A vulnerability in the Extensible Messaging and Presence Pro…
• CVE-2016-6446A vulnerability in Web Bridge for Cisco Meeting Server could…