CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

OpenVAS•added 2015/11/16 12:0 a.m.•20 views

Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco FireSIGHT Management Center MC could allow an authenticated, remote attacker to execute a stored, cross-site scripting XSS attack against a user of the web interface. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted...

3.5CVSS5.9AI score0.01075EPSS

CNVD•added 2015/11/13 12:0 a.m.•4 views

Multiple Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. Multiple...

3.5CVSS6AI score0.01075EPSS

NVD•added 2015/11/12 3:59 a.m.•18 views

CVE-2015-6363

Multiple cross-site scripting XSS vulnerabilities in the web framework in Cisco FireSIGHT Management Center MC 5.4.1.4 and 6.0.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuw88396...

3.5CVSS5.4AI score0.01075EPSS

Prion•added 2015/11/12 3:59 a.m.•19 views

Cross site scripting

3.5CVSS5.7AI score0.01075EPSS

Cvelist•added 2015/11/12 2:0 a.m.•26 views

CVE-2015-6363

5.4AI score0.01075EPSS

CVE•added 2015/11/12 2:0 a.m.•55 views

CVE-2015-6363

Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability (CVE-2015-6363) affects MC 5.4.1.4 and 6.0.1. The root cause is improper sanitization of parameter values in the web framework, allowing an authenticated remote attacker to inject arbitrary script/HTML via unspecif...

3.5CVSS5.5AI score0.01075EPSS

Cisco•added 2015/11/11 10:30 a.m.•40 views

Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco FireSIGHT Management Center MC could allow an authenticated, remote attacker to execute a stored, cross-site scripting XSS attack against a user of the web interface. The vulnerability is due to improper sanitization of parameter values. An attacker...

4CVSS5.8AI score0.01075EPSS

OpenVAS•added 2015/11/10 12:0 a.m.•17 views

Cisco FireSIGHT Management Center Cross-Site Scripting / HTML Injection Vulnerability

A vulnerability in the web interface of Cisco FireSIGHT Management Center MC could allow an authenticated, remote attacker to modify a page of the web interface. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

3.5CVSS6.5AI score0.01085EPSS

CNVD•added 2015/11/04 12:0 a.m.•4 views

Cisco FireSight Management Center Cross-Site Scripting Vulnerability

Cisco FireSIGHT Management Center MC is the United States Cisco Cisco company's set of centralized on the Cisco ASA with FirePOWER Services and Cisco FirePOWER network security equipment management management center software. A cross-site scripting vulnerability exists in Cisco FireSight MC...

3.5CVSS6.3AI score0.01085EPSS

CNVD•added 2015/11/03 12:0 a.m.•4 views

Multiple Cisco FireSight Management Center Cross-Site Scripting Vulnerabilities

Cisco FireSight Management Center is a holistic visibility security management platform from Cisco. This security management console and data repository product provides centralized event and policy management to enable secure operations. A cross-site scripting vulnerability exists in multiple...

3.5CVSS6AI score0.01085EPSS

NVD•added 2015/10/31 4:59 a.m.•23 views

CVE-2015-6354

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSight Management Center MC 5.4.1.3 and 6.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuv73338...

NVD•added 2015/10/31 4:59 a.m.•16 views

CVE-2015-6353

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSight Management Center MC 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922...

Prion•added 2015/10/31 4:59 a.m.•21 views

Cross site scripting

3.5CVSS5.7AI score0.01085EPSS

Prion•added 2015/10/31 4:59 a.m.•14 views

Cross site scripting

3.5CVSS5.7AI score0.01085EPSS

CVE•added 2015/10/31 1:0 a.m.•65 views

CVE-2015-6353

Cisco FireSight Management Center (MC) vulnerability CVE-2015-6353 affects MC 5.3.1.5 and 5.4.x up to 5.4.1.3 where an authenticated remote attacker can inject arbitrary web script or HTML via unspecified parameters, due to improper input sanitization. The issue is confirmed by multiple sources, ...

CVE•added 2015/10/31 1:0 a.m.•56 views

CVE-2015-6354

Cisco FireSight Management Center (MC) is affected by CVE-2015-6354, with vulnerable versions 5.4.1.3 and 6.0. The flaw is a cross-site scripting (XSS) vulnerability caused by improper sanitization of parameter values in the MC web interface, allowing an authenticated, remote attacker to inject a...

Cvelist•added 2015/10/31 1:0 a.m.•23 views

CVE-2015-6354

5.4AI score0.01085EPSS

Cvelist•added 2015/10/31 1:0 a.m.•20 views

CVE-2015-6353

5.4AI score0.01085EPSS

Cisco•added 2015/10/29 12:0 a.m.•41 views

Cisco FireSIGHT Management Center Cross-Site Scripting Vulnerability

A vulnerability in the web framework of Cisco FireSIGHT Management Center MC could allow an authenticated, remote attacker to execute a stored cross-site scripting XSS attack against the user of the web interface. The vulnerability is due to improper sanitization of parameter values. An attacker...

4CVSS5.6AI score0.01085EPSS