Unscored CVE-2016-1294 EUVD-2016-2393GHSA-gwf4-vgqj-vr2f

Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to injec…

Published Jan 16, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the Management Center in Cisco FireSIGHT System Software 6.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted cookie, aka Bug ID CSCuw89094.

References

1034690 vdb-entry
20160115 Cisco FireSIGHT Management Center DOM-Based Cross-Site Scripting Vulnerability vendor-advisory