PT-2015-4852

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 5.3.1.1 Description The issue allows remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters. Recommendations For Cisco FireSIGHT System Software version 5.3.1.1,...

PT-2015-4874

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.3 and 6.0.0 Description The issue allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session. Recommendations For version...

CVE-2015-0773: Undefined Security Weakness

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

CVE-2015-0737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

CVE-2015-0766

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

CVE-2015-0766: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

PT-2015-4871

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 6.0.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the administrative web interface of the Management Center component. These vulnerabilities allow remote attackers...

CVE-2015-0739

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

PT-2015-4854

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software version 5.3.0 Description The issue in Cisco FireSIGHT System Software allows remote authenticated users to upload arbitrary files to the Baseboard Management Controller BMC via unspecified vectors...

CVE-2015-0739: Improper Input Validation

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

CVE-2015-0706: Undefined Security Weakness

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...

PT-2015-4827

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.1.1 through 5.3.1.2 Cisco FireSIGHT System Software version 6.0.0 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HT...

CVE-2015-0707: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425...