Firesight System Software@5.4.1 Security Vulnerabilities and Issues — Firesight System Software@5.4.1 CVE List

Lucene search

CiscoFiresight System Software5.4.1

8 matches found

CVE•added 2016/09/12 10:59 a.m.•185 views

CVE-2016-6396

Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.

5.3CVSS5.3AI score0.00433EPSS

CVE•added 2017/08/07 6:29 a.m.•56 views

CVE-2017-6766

A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected sy...

7.5CVSS7.4AI score0.00151EPSS

CVE•added 2015/10/31 4:59 a.m.•51 views

CVE-2015-6353

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922.

3.5CVSS5.5AI score0.00283EPSS

CVE•added 2015/12/18 11:59 a.m.•46 views

CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.

5CVSS6.9AI score0.00397EPSS

CVE•added 2016/09/12 10:59 a.m.•44 views

CVE-2016-6395

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.

5.4CVSS5AI score0.0034EPSS

CVE•added 2016/04/01 12:59 a.m.•39 views

CVE-2016-1345

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.

7.5CVSS7.5AI score0.00488EPSS

CVE•added 2016/10/05 5:59 p.m.•35 views

CVE-2016-6417

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.

8.8CVSS8.9AI score0.00129EPSS

CVE•added 2016/09/12 10:59 a.m.•34 views

CVE-2016-6394

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

9.1CVSS9AI score0.003EPSS