CVE-2015-0737: Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML…

medium4.3CVSS 3.1

AVNACMAuNCNIPAN

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary web script or HTML via a crafted (1) GET or (2) POST parameter, aka Bug ID CSCuu11099.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	firesight_system_software	—	—
openstack	swift	>= 0 < 1.13.1-0ubuntu1.5	1.13.1-0ubuntu1.5

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

osv5.0MEDIUM