FS
Product
Firesight System Software
35
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 8Low 1
Watch
Add Firesight System Software to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-6417 | 8.8 | Oct 5 | Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the… Affected: 4.10.2; 4.10.2.1; 4.10.2.2; 4.10.2.3; 4.10.2.4; 4.10.2.5; +34 more |
| CVE-2016-1394 | 8.6 | Jul 3 | Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID… Affected: 6.0.0; 6.0.0.1; 6.0.1; 6.1.0 |
| CVE-2017-6766 | 7.5 | Aug 7 | A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could… Affected: 5.4.0; 5.4.1; 6.0.0; 6.1.0; 6.2.0; 6.2.1; +1 more |
| CVE-2016-9193 | 7.5 | Dec 14 | A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated,… Affected: 6.0.0; 6.0.0.0; 6.0.0.1; 6.0.1; 6.0.1.1; 6.1.0 |
| CVE-2016-6460 | 7.5 | Nov 19 | A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software could allow an unauthenticated, remote… Affected: 5.4.0.2; 5.4.1.1; 5.4.1.6; 6.0.0; 6.1.0; 6.2.0 |
| CVE-2016-6411 | 7.5 | Sep 24 | Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended… Affected: 6.0.1 |
| CVE-2016-1463 | 7.5 | Jul 28 | Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug… Affected: 5.3.0; 5.3.1; 5.4.0; 6.0.0; 6.0.1 |
| CVE-2016-1368 | 7.5 | May 5 | Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks… Affected: 5.2.0; 5.2.0.1; 5.2.0.2; 5.2.0.3; 5.2.0.4; 5.2.0.5; +22 more |
| CVE-2016-1345 | 7.5 | Apr 1 | Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in… Affected: 5.4.0; 5.4.0.1; 5.4.0.2; 5.4.0.3; 5.4.0.4; 5.4.0.5; +8 more |
Showing 9