CVE-2016-6419

published 2016-10-05

CVE-2016-6419: SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via…

high 7.5 CVSS 3.0

AV N AC H PR L UI N S U C H I H A H

SQL injection vulnerability in Cisco Firepower Management Center 4.10.3 through 5.4.0 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCur25485.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
cisco	firepower_management_center	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—
cisco	secure_firewall_management_center	—	—

CWE-89