CVE-2015-0766

Cisco FireSIGHT System Software 6.0.0 - Cross-Site Scripting in Management Center Administrative Web Interface

Title source: llm
STIX 2.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=39171
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032482

Scores

EPSS 0.0155
EPSS Percentile 72.4%

Details

CWE
CWE-79
Status published
Products (1)
cisco/firesight_system_software 6.0.0
Published Jun 04, 2015
Tracked Since Feb 18, 2026