CVE-2015-6380

CVE-2015-6380 affects Cisco Firepower Extensible Operating System on Firepower 9000 appliances (1.1(1.160)). The root cause is lack of input validation in the web interface user scripts, allowing an authenticated, remote attacker to inject and execute arbitrary OS commands with the privileges of ...