Cisco

Firesight System Software

35 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2015-6419

  • EPSS 0.22%
  • Veröffentlicht 12.12.2015 16:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

6.8

CVE-2015-6357

  • EPSS 5.94%
  • Veröffentlicht 18.11.2015 11:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid...

3.5

CVE-2015-6363

  • EPSS 0.19%
  • Veröffentlicht 12.11.2015 03:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Management Center (MC) 5.4.1.4 and 6.0.1 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuw8...

3.5

CVE-2015-6354

  • EPSS 0.28%
  • Veröffentlicht 31.10.2015 04:59:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.3 and 6.0 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuv73338.

3.5

CVE-2015-6353

  • EPSS 0.28%
  • Veröffentlicht 31.10.2015 04:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuu28922.

9

CVE-2015-6335

  • EPSS 0.34%
  • Veröffentlicht 25.10.2015 02:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administrators to bypass intended policy restrictions and execute Linux commands as root via unspecified vectors, aka Bu...

6.4

CVE-2015-4302

  • EPSS 0.7%
  • Veröffentlicht 19.08.2015 14:59:01
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified parameters in a POST request, aka Bug ID CSCuu25390.

4.3

CVE-2015-4270

  • EPSS 0.26%
  • Veröffentlicht 14.07.2015 17:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCu...

6.8

CVE-2015-4242

  • EPSS 0.11%
  • Veröffentlicht 08.07.2015 14:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 5.4.1.2 and 6.0.0 in FireSIGHT Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuu94721.

5.5

CVE-2015-0773

  • EPSS 0.38%
  • Veröffentlicht 12.06.2015 10:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078.