Unscored CVE-2015-0707 EUVD-2015-0720GHSA-f96w-cfm9-cphc

Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote …

Published Apr 23, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.

References

20150422 Cisco FireSIGHT Management Center Web Framework Stored Cross-Site Scripting Vulnerability vendor-advisory