Unscored CVE-2016-6395 EUVD-2016-7318GHSA-x4q8-qxfw-mxfq

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGH…

Published Sep 12, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.

References

1036755 vdb-entry
92824 vdb-entry
20160907 Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Scripting Vulnerability vendor-advisory