Cross-Site Scripting Vulnerabilities in Cisco FireSIGHT Management Center
CVE-2015-6363

Currently unrated

Key Information:

Vendor

Cisco
Status
Firesight System Software
Vendor
CVE Published:
12 November 2015

What is CVE-2015-6363?

Multiple cross-site scripting (XSS) vulnerabilities exist in the web framework of Cisco FireSIGHT Management Center versions 5.4.1.4 and 6.0.1. These vulnerabilities permit remote authenticated users to inject arbitrary web scripts or HTML into the application, potentially leading to unauthorized access and manipulation of sensitive information. Attackers can exploit this flaw through unspecified parameters, compromising the integrity of the web application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.securitytracker.com/id/1034138
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.