CVE-2015-4287

CVE-2015-4287 affects Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices. The issue arises from improper authentication validation in the device’s web interface, allowing remote attackers to bypass access restrictions and obtain sensitive device information by visitin...

CVE-2015-6372

CVE-2015-6372 affects Cisco Firepower Extensible Operating System on Firepower 9000 devices (FEO 1.1(1.160)). The web-based management interface is vulnerable to a cross-site scripting (XSS) attack via a crafted value, enabling remote attackers to inject arbitrary script/HTML in the user’s browse...

CVE-2015-6380

CVE-2015-6380 affects Cisco Firepower Extensible Operating System on Firepower 9000 appliances (1.1(1.160)). The root cause is lack of input validation in the web interface user scripts, allowing an authenticated, remote attacker to inject and execute arbitrary OS commands with the privileges of ...

CVE-2015-6371

CVE-2015-6371 affects Cisco Firepower Extensible Operating System (FSO) 1.1(1.160) on Firepower 9000 devices. The issue arises from lack of input validation in parameters passed to certain user scripts, enabling remote authenticated users to read arbitrary files on the device via crafted script i...

CVE-2015-6373

CVE-2015-6373 affects Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices. Root cause: CSRF vulnerability due to lack of CSRF protection. Impact: remote attackers could hijack user authentication and perform unwanted actions. Exploitation details: described as unauthe...

CVE-2020-3459

CVE-2020-3459 affects Cisco FXOS Software for Firepower 4100/9300 series. The issue stems from insufficient input validation in the CLI, allowing an authenticated, local attacker to submit crafted input that commands are executed with root privileges on the underlying OS. Impact is command inject...