CVE-2015-4242

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

CVE-2015-4242: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721...

Cisco FireSIGHT System Software Cross-Site Scripting Vulnerability (CNVD-2015-03926)

Cisco FireSIGHT System Software is the United States Cisco Cisco company's set of management center software, which supports the centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security appliances network security and operational functions of the...

CVE-2015-0773

Cisco FireSIGHT Management Center (System Software 5.3.1.3 and 6.0.0) is affected by CVE-2015-0773. The issue allows remote authenticated users to delete another user’s dashboard by submitting a modified VPN deletion request within a management session, due to improper validation of the deletion ...

CVE-2015-0737

Cisco FireSIGHT System Software 5.3.1.1 contains multiple XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via crafted GET or POST parameters (Bug ID CSCuu11099). Root cause cited: insufficient input validation. Affects Cisco FireSIGHT System Software; adviso...

CVE-2015-0737: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted 1 GET or 2 POST parameter, aka Bug ID CSCuu11099...

CVE-2015-0773: Undefined Security Weakness

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078...

CVE-2015-0765

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

Code injection

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

CVE-2015-0765

Cisco ONS 15454 System Software 10.30 and 10.301 are affected by CVE-2015-0765, a DoS vulnerability where remote attackers can exhaust tNetTask CPU and reset the controller card by sending large IP or Ethernet traffic (Bug ID CSCus57263). The issue allows unauthenticated remote access to trigger ...

CVE-2015-0766

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

CVE-2015-0766: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut4719...

CVE-2015-0765: Undefined Security Weakness

Cisco ONS 15454 System Software 10.30 and 10.301 allows remote attackers to cause a denial of service tNetTask CPU consumption or card reset via a flood of 1 IP or 2 Ethernet traffic, aka Bug ID CSCus57263...

Cisco ONS 15454 System Software Denial of Service Vulnerability

A vulnerability in Cisco ONS 15454 System Software could allow an unauthenticated, remote attacker to cause the controller card on an affected device to reset, resulting in a denial of service DoS condition. The vulnerability occurs because tNetTask CPU time is consumed when the software processe...

CVE-2015-0739

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

CVE-2015-0739

Cisco FireSIGHT System Software 5.3.0 (Sourcefire 3D Sensor) LOM vulnerability allows remote authenticated users to perform arbitrary BMC file uploads via unspecified vectors; root cause is insufficient input validation in Lights-Out Management. Exploitation could lead to arbitrary code execution...

CVE-2015-0739: Improper Input Validation

The Lights-Out Management LOM implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller BMC file uploads via unspecified vectors, aka Bug ID CSCus87938...

Cisco FireSIGHT Management Center FireSIGHT System Software Cross-Site Scripting Vulnerability

Cisco FireSIGHT Management Center is the United States Cisco Cisco company's set of support for centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security equipment network security and operational functions of the management center software. A cross-si...

CVE-2015-0706

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966...

CVE-2015-0706

Cisco FireSIGHT Management Center/Open Redirect: A vulnerability in the web framework allows an unauthenticated, remote attacker to inject a crafted HTTP header, causing users to be redirected to arbitrary sites and enabling phishing. Affected are FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6...