Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2015-03926)

Cisco FireSIGHT System Software is the United States Cisco Cisco company's set of management center software, which supports the centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security appliances network security and operational functions of the...

CVE-2015-0773

Cisco FireSIGHT Management Center (System Software 5.3.1.3 and 6.0.0) is affected by CVE-2015-0773. The issue allows remote authenticated users to delete another user’s dashboard by submitting a modified VPN deletion request within a management session, due to improper validation of the deletion ...

CVE-2015-0737

Cisco FireSIGHT System Software 5.3.1.1 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters (Bug ID CSCuu11099). Root cause cited: insufficient input validation. Affects Cisco FireSIGHT System Software; adviso...

PT-2015-4852

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 5.3.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters. Recommendations For Cisco FireSIGHT System Software version 5.3.1.1,...

CVE-2015-0773: Undefined Security Weakness

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

CVE-2015-0737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

PT-2015-4874

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.3 and 6.0.0 Description The issue allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session. Recommendations For version...

CVE-2015-0765

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

Code injection

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

CVE-2015-0766

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

CVE-2015-0765

Cisco ONS 15454 System Software 10.30 and 10.301 are affected by CVE-2015-0765, a DoS vulnerability where remote attackers can exhaust tNetTask CPU and reset the controller card by sending large IP or Ethernet traffic (Bug ID CSCus57263). The issue allows unauthenticated remote access to trigger ...

CVE-2015-0766: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

CVE-2015-0765: Undefined Security Weakness

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

PT-2015-4871

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 6.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface of the Management Center component. These vulnerabilities allow remote attackers...

PT-2015-4870

Name of the Vulnerable Software and Affected Versions Cisco ONS 15454 System Software versions 10.30 through 10.301 Description The issue allows remote attackers to cause a denial of service, either through tNetTask CPU consumption or card reset, by flooding the system with IP or Ethernet traffic...

Cisco ONS 15454 System Software Denial of Service Vulnerability

A vulnerability in Cisco ONS 15454 System Software could allow an unauthenticated, remote attacker to cause the controller card on an affected device to reset, resulting in a denial of service DoS condition. The vulnerability occurs because tNetTask CPU time is consumed when the software processe...

CVE-2015-0739

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

CVE-2015-0739

Cisco FireSIGHT System Software 5.3.0 (Sourcefire 3D Sensor) LOM vulnerability allows remote authenticated users to perform arbitrary BMC file uploads via unspecified vectors; root cause is insufficient input validation in Lights-Out Management. Exploitation could lead to arbitrary code execution...

CVE-2015-0739: Improper Input Validation

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

PT-2015-4854

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 5.3.0 Description The issue in Cisco FireSIGHT System Software allows remote authenticated users to upload arbitrary files to the Baseboard Management Controller BMC via unspecified vectors...