PT-2015-4828 · Cisco · Firesight Management Center+1
Published
2015-04-23
·
Updated
2015-04-23
·
CVE-2015-0707
CVSS v2.0
3.5
Low
| Vector | AV:N/AC:M/Au:S/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Cisco FireSIGHT System Software versions 5.3.1.1 through 6.0.0
Description
A cross-site scripting (XSS) issue allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter. This affects the FireSIGHT Management Center.
Recommendations
For version 5.3.1.1, update to a version that fixes the issue.
For version 6.0.0, update to a version that fixes the issue.
As a temporary workaround, consider restricting access to the affected parameter to minimize the risk of exploitation.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Firesight Management Center
Firesight System