Cisco Firepower System Software Static Credential Vulnerability

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to log in to the device with a default account. This account does not have full administrator privileges. The vulnerability is due to a user account that has a default and static password. This...

Cisco FirePOWER Management Center Cross-Site Scripting Vulnerability

Cisco FirePOWER Management Center is the United States Cisco Cisco company's new generation of firewall management center software. A cross-site scripting vulnerability exists in Cisco Firepower Management Center. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability

A vulnerability in the HTTP framework of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against an affected device. The vulnerability is due to insufficient filtering of output data. An attacker could exploit this...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

CVE-2016-1431

Cisco Firepower Management Center is affected by CVE-2016-1431: an XSS vulnerability in the HTTP framework allows unauthenticated remote attackers to inject arbitrary web script or HTML via a crafted URL. Affected versions include FMC 4.10.3 and 5.2.0–5.4.0 (including 5.3.0/5.3.1 as listed in sou...

CVE-2016-1431

Cross-site scripting XSS vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516...

PT-2016-4782 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center versions 4.10.3 through 5.4.0 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations: For versions 4.10.3 through 5.4.0...

Cisco Firepower Management Center Persistent Cross-Site Scripting Vulnerability

A vulnerability in the HTTP framework of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against an affected device. The vulnerability is due to insufficient filtering of output data. An attacker could exploit this...

Cisco Firepower Management Center Web Interface Code Injection Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to modify a page in the web interface. The vulnerability is due to improper sanitization of some parameter values. An attacker could exploit this vulnerability by injecting...

Cisco Firepower Management Center Web Interface Code Injection Vulnerability

Cisco Firepower is a family of advanced firewalls. Cisco Firepower Management Center version 5.4.x-6.0.0.1 Web interface does not correctly filter the value of certain parameters, there is a security vulnerability, remote attackers inject malicious code into the affected parameters, inducing user...

CVE-2016-1413

The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517...

CVE-2016-1413

The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517...

Design/Logic Flaw

The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517...

CVE-2016-1413

The web interface in Cisco Firepower Management Center 5.4.0 through 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517...

CVE-2016-1413

Cisco Firepower Management Center Web Interface Code Injection Vulnerability (CVE-2016-1413) affects FMC versions 5.4.0–6.0.0.1. The issue stems from improper sanitization of certain parameter values, allowing an authenticated, remote attacker to inject code and modify pages in the web interface....

Cisco Firepower Management Center Web Interface Code Injection Vulnerability

A vulnerability in the web interface of Cisco Firepower Management Center could allow an authenticated, remote attacker to modify a page in the web interface. The vulnerability is due to improper sanitization of some parameter values. An attacker could exploit this vulnerability by injecting...

Cisco FirePOWER System Software Denial of Service Vulnerability

Cisco Firepower is a family of advanced firewalls. A security vulnerability exists in the packet processing functionality of the Cisco FirePOWER System Software. An unauthenticated, remote attacker could cause a denial of service on the affected device...

Cisco FirePOWER System Software Kernel Logging Configuration Denial of Service Vulnerability

Cisco Firepower is a family of advanced firewalls. A security vulnerability exists in the kernel logging configuration of the Cisco FirePOWER System Software.ASA 5585-X FirePOWER SSP module is affected by this vulnerability. An unauthenticated remote attacker could cause a denial of service on th...