CVE-2015-0707
Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 - Authenticated Cross-Site Scripting
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38487
Scores
EPSS
0.0078
EPSS Percentile
52.2%
Details
CWE
CWE-79
Status
published
Products (2)
cisco/firesight_system_software
5.3.1.1
cisco/firesight_system_software
6.0.0
Published
Apr 23, 2015
Tracked Since
Feb 18, 2026