CVE-2017-6716

MEDIUM

Cisco Firepower Management Center < 6.0.0.0 - Authenticated Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99220

Scores

CVSS v3 5.4
EPSS 0.0064
EPSS Percentile 47.0%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (12)
cisco/secure_firewall_management_center 5.3.1.7
cisco/secure_firewall_management_center 5.4.0
cisco/secure_firewall_management_center 5.4.0.2
cisco/secure_firewall_management_center 5.4.1
cisco/secure_firewall_management_center 5.4.1.1
cisco/secure_firewall_management_center 5.4.1.2
cisco/secure_firewall_management_center 5.4.1.3
cisco/secure_firewall_management_center 5.4.1.4
cisco/secure_firewall_management_center 5.4.1.5
cisco/secure_firewall_management_center 5.4.1.6
... and 2 more
Published Jul 04, 2017
Tracked Since Feb 18, 2026