CVE-2016-1413

Cisco Firepower Management Center Web Interface Code Injection Vulnerability (CVE-2016-1413) affects FMC versions 5.4.0–6.0.0.1. The issue stems from improper sanitization of certain parameter values, allowing an authenticated, remote attacker to inject code and modify pages in the web interface....