FS
Product
Firesight System Software
35
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 8Low 1
Watch
Add Firesight System Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6394 | 9.1 | Sep 12 | Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session… Affected: 5.2.0; 5.2.0.1; 5.2.0.2; 5.2.0.3; 5.2.0.4; 5.2.0.5; +32 more |
| CVE-2016-6417 | 8.8 | Oct 5 | Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the… Affected: 4.10.2; 4.10.2.1; 4.10.2.2; 4.10.2.3; 4.10.2.4; 4.10.2.5; +34 more |
| CVE-2016-1394 | 8.6 | Jul 3 | Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID… Affected: 6.0.0; 6.0.0.1; 6.0.1; 6.1.0 |
| CVE-2017-6766 | 7.5 | Aug 7 | A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could… Affected: 5.4.0; 5.4.1; 6.0.0; 6.1.0; 6.2.0; 6.2.1; +1 more |
| CVE-2016-9193 | 7.5 | Dec 14 | A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated,… Affected: 6.0.0; 6.0.0.0; 6.0.0.1; 6.0.1; 6.0.1.1; 6.1.0 |
| CVE-2016-6460 | 7.5 | Nov 19 | A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software could allow an unauthenticated, remote… Affected: 5.4.0.2; 5.4.1.1; 5.4.1.6; 6.0.0; 6.1.0; 6.2.0 |
| CVE-2016-6411 | 7.5 | Sep 24 | Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended… Affected: 6.0.1 |
| CVE-2016-1463 | 7.5 | Jul 28 | Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug… Affected: 5.3.0; 5.3.1; 5.4.0; 6.0.0; 6.0.1 |
| CVE-2016-1368 | 7.5 | May 5 | Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks… Affected: 5.2.0; 5.2.0.1; 5.2.0.2; 5.2.0.3; 5.2.0.4; 5.2.0.5; +22 more |
| CVE-2016-1345 | 7.5 | Apr 1 | Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in… Affected: 5.4.0; 5.4.0.1; 5.4.0.2; 5.4.0.3; 5.4.0.4; 5.4.0.5; +8 more |
| CVE-2017-6735 | 6.7 | Jul 10 | A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted… Affected: 6.2.0; 6.2.1 |
| CVE-2016-6471 | 6.5 | Dec 14 | A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view… Affected: 5.4.1.6 |
| CVE-2016-6420 | 6.5 | Oct 5 | Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2016-1355 | 6.1 | Mar 3 | Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject… Affected: 6.1.0 |
| CVE-2016-1294 | 6.1 | Jan 16 | Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 6.0.1 |
| CVE-2016-1293 | 6.1 | Jan 16 | Multiple cross-site scripting (XSS) vulnerabilities in the Management Center in Cisco FireSIGHT System Software 6.0.0 and 6.0.1 allow remote attackers to inject arbitrary web… Affected: 6.0.0; 6.0.1 |
| CVE-2016-6395 | 5.4 | Sep 12 | Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows… Affected: 5.1.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.1; 5.1.1.1; +34 more |
| CVE-2016-6396 | 5.3 | Sep 12 | Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware… Affected: 5.1.0; 5.1.0.1; 5.1.0.2; 5.1.0.3; 5.1.1; 5.1.1.1; +34 more |
| CVE-2016-1356 | 3.7 | Mar 3 | Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to enumerate valid usernames by… Affected: _6.1.0 |
| CVE-2015-6427 | – | Dec 18 | Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled… Affected: 5.3.0; 5.3.0.1; 5.3.0.2; 5.3.1; 5.3.1.1; 5.3.1.2; +14 more |
| CVE-2015-6419 | – | Dec 12 | Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug… Affected: 4.10.3; 5.2.0; 5.3.0; 5.3.1; 5.4.0 |
| CVE-2015-6357 | – | Nov 18 | The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows… Affected: 5.2.0; 5.3.0; 5.3.1.1; 5.3.1.2; 5.3.1.5; 5.4.0; +1 more |
| CVE-2015-6363 | – | Nov 12 | Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Management Center (MC) 5.4.1.4 and 6.0.1 allow remote authenticated users to inject… Affected: 5.4.1.4; 6.0.1 |
| CVE-2015-6354 | – | Oct 31 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.3 and 6.0 allow remote authenticated users to inject arbitrary web script or… Affected: 5.4.1.3; 6.0.0 |
| CVE-2015-6353 | – | Oct 31 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject… Affected: 5.3.1.5; 5.4.0; 5.4.0.1; 5.4.0.4; 5.4.1; 5.4.1.2; +1 more |
| CVE-2015-6335 | – | Oct 25 | The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy… Affected: 5.3.1.7; 5.4.0.4; 6.0.0 |
| CVE-2015-4302 | – | Aug 19 | The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified parameters in a POST request, aka Bug ID… Affected: 5.3.1.4 |
| CVE-2015-4270 | – | Jul 14 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a… Affected: 5.3.1.5; 6.0.0 |
| CVE-2015-4242 | – | Jul 8 | Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the… Affected: 5.4.1.2; 6.0.0 |
| CVE-2015-0773 | – | Jun 12 | Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management… Affected: 5.3.1.1; 6.0.0 |
| CVE-2015-0737 | – | Jun 12 | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) GET… Affected: 5.3.1.1 |
| CVE-2015-0766 | – | Jun 4 | Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote… Affected: 6.0.0 |
| CVE-2015-0739 | – | May 19 | The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary… Affected: 5.3.0 |
| CVE-2015-0707 | – | Apr 23 | Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary… Affected: 5.3.1.1; 6.0.0 |
| CVE-2015-0706 | – | Apr 23 | Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary… Affected: 5.3.1.1; 5.3.1.2; 6.0.0 |
Showing 35