CVE-2016-1355

CWE-79 — Cross-site Scripting (XSS)4 documents4 sources

Severity

6.1MEDIUM

EPSS

0.3%

top 51.63%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Firesight System Software

Timeline

PublishedMar 3

Latest updateMay 17

Description

Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6.1.0 allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCuy41687.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages1 packages

▶NVDcisco/firesight_system_software6.1.0

🔴Vulnerability Details

GHSA

GHSA-5c82-4v64-r383: Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6↗2022-05-17

▶

CVEList

CVE-2016-1355: Cross-site scripting (XSS) vulnerability in the Device Management UI in the management interface in Cisco FireSIGHT System Software 6↗2016-03-03

▶

📋Vendor Advisories

Cisco

Cisco FireSIGHT System Software Device Management UI Cross-Site Scripting Vulnerability↗2016-03-02

▶