CVE-2015-4270

CVE-2015-4270 concerns Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0, where multiple cross-site scripting (XSS) vulnerabilities exist due to insufficient validation of user-supplied input. A remote attacker could inject arbitrary script via a crafted URL, potentially compromising sessions or ...

CVE-2015-4270

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702...

Cisco FireSIGHT Management Center Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in Cisco FireSIGHT Management Center could allow an unauthenticated, remote attacker to perform reflected cross-site scripting XSS attacks. The vulnerabilities are due to insufficient validation of user-supplied input by the affected software. An attacker could exploit...

Cisco FireSIGHT Management Center Cross-Site Request Forgery Vulnerability

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. A cross-si...

CVE-2015-4242

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

CVE-2015-4242

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

CVE-2015-4242

The CVE-2015-4242 issue affects Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 within FireSIGHT Management Center. Root cause: insufficient CSRF protections, enabling cross-site request forgery. Impact: remote attackers could hijack the authentication of arbitrary users and perform unauthorize...

Cisco FireSIGHT Management Center Cross-Site Request Forgery Vulnerability

A vulnerability in the Cisco FireSIGHT Management Center which could allow an unauthenticated, remote attacker to execute unwanted actions. The vulnerability is due to insufficient cross-site request forgery CSRF protections. An attacker could exploit this vulnerability by tricking the user of a...

Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2015-03926)

Cisco FireSIGHT System Software is the United States Cisco Cisco company's set of management center software, which supports the centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security appliances network security and operational functions of the...

CVE-2015-0773

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

Design/Logic Flaw

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

CVE-2015-0737

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

CVE-2015-0737

Cisco FireSIGHT System Software 5.3.1.1 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters (Bug ID CSCuu11099). Root cause cited: insufficient input validation. Affects Cisco FireSIGHT System Software; adviso...

CVE-2015-0773

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

CVE-2015-0737

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

CVE-2015-0773

Cisco FireSIGHT Management Center (System Software 5.3.1.3 and 6.0.0) is affected by CVE-2015-0773. The issue allows remote authenticated users to delete another user’s dashboard by submitting a modified VPN deletion request within a management session, due to improper validation of the deletion ...

Cisco FireSIGHT Management Center Configuration Modification Vulnerability

Cisco FireSIGHT ManagementCenter is a suite of support for centralized management of network security and operations of Cisco ASA and Cisco FirePOWER network security appliances using FirePOWER Services. Cisco FireSIGHT ManagementCenter has security issues. remotely authenticated unprivileged use...

Cisco FireSIGHT Management Center Dashboard Deletion Vulnerability

A vulnerability in management interface used to delete VPNs in the Cisco FireSIGHT Management Center could allow an authenticated, remote attacker with limited user permissions to delete another user's VPN dashboard. The vulnerability occurs because the product does not properly validate the...