PT-2016-6871 · Cisco · Cisco Firepower Management Center+1

Published 2016-09-12 · Updated 2016-11-28 · CVE-2016-6395

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions prior to 6.1 Cisco FireSIGHT System Software versions prior to 6.1

Description A cross-site scripting (XSS) issue exists in the web-based management interface, allowing remote authenticated users to inject arbitrary web script or HTML via a crafted URL.

Recommendations For Cisco Firepower Management Center versions prior to 6.1, update to version 6.1 or later. For Cisco FireSIGHT System Software versions prior to 6.1, update to version 6.1 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-6395

Affected Products

Cisco Firesight System

Cisco Firepower Management Center

References · 5

• https://osv.dev/vulnerability/CVE-2016-6395 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6395 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss · Vendor Advisory
• http://securityfocus.com/bid/92824 · Note
• http://securitytracker.com/id/1036755 · Note