CVE-2016-9206

A vulnerability in the ccmadmin page of Cisco Unified Communications Manager (CUCM) could allow an unauthenticated, remote attacker to conduct reflected cross-site scripting (XSS) attacks. More Information: CSCvb64641. Known Affected Releases: 11.5(1.10000.6) 11.5(1.11007.2). Known Fixed Releases: 11.5(1.12900.7) 11.5(1.12900.8) 12.0(0.98000.155) 12.0(0.98000.178) 12.0(0.98000.366) 12.0(0.98000.468) 12.0(0.98000.536) 12.0(0.98500.6).

• CWE-79

• http://www.securityfocus.com/bid/94793Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037424Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cucmMitigation, Vendor Advisory
• http://www.securityfocus.com/bid/94793Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037424Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-cucmMitigation, Vendor Advisory

Published

Dec 14, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9200A vulnerability in the web framework code of Cisco Prime Col…
• CVE-2016-9201A vulnerability in the Zone-Based Firewall feature of Cisco …
• CVE-2016-9202A vulnerability in the web-based management interface of Cis…
• CVE-2016-9203A vulnerability in the Internet Key Exchange Version 2 (IKEv…
• CVE-2016-9204A vulnerability in the Cisco Intercloud Fabric (ICF) Directo…
• CVE-2016-9205A vulnerability in the HTTP 2.0 request handling code of Cis…
• CVE-2016-9207A vulnerability in the HTTP traffic server component of Cisc…
• CVE-2016-9208A vulnerability in the File Management Utility, the Download…
• CVE-2016-9209A vulnerability in TCP processing in Cisco FirePOWER system …
• CVE-2016-9210A vulnerability in the Cisco Unified Reporting upload tool a…
• CVE-2016-9211A vulnerability in TCP port management in Cisco ONS 15454 Se…
• CVE-2016-9212A vulnerability in the Decrypt for End-User Notification con…