Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2016-6417
Disclosure Date: October 05, 2016 (last updated November 25, 2024)
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
0
Attacker Value
Unknown
CVE-2016-6420
Disclosure Date: October 05, 2016 (last updated November 25, 2024)
Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467.
0
Attacker Value
Unknown
CVE-2016-6396
Disclosure Date: September 12, 2016 (last updated November 25, 2024)
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
0
Attacker Value
Unknown
CVE-2016-6395
Disclosure Date: September 12, 2016 (last updated November 25, 2024)
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
0
Attacker Value
Unknown
CVE-2016-6394
Disclosure Date: September 12, 2016 (last updated November 25, 2024)
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
0
Attacker Value
Unknown
CVE-2016-1463
Disclosure Date: July 28, 2016 (last updated November 25, 2024)
Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.
0
Attacker Value
Unknown
CVE-2016-1368
Disclosure Date: May 05, 2016 (last updated November 25, 2024)
Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remote attackers to cause a denial of service (packet-processing outage) via crafted packets, aka Bug ID CSCuu86214.
0
Attacker Value
Unknown
CVE-2015-6427
Disclosure Date: December 18, 2015 (last updated October 05, 2023)
Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.
0
Attacker Value
Unknown
CVE-2015-6419
Disclosure Date: December 12, 2015 (last updated October 05, 2023)
Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.
0
Attacker Value
Unknown
CVE-2015-6357
Disclosure Date: November 18, 2015 (last updated October 05, 2023)
The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.
0
