Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco firepower management center 5.4.0.2 vulnerabilities and exploits

(subscribe to this query)
4
CVSSv2
CVE-2016-1413
The web interface in Cisco Firepower Management Center 5.4.0 up to and including 6.0.0.1 allows remote authenticated users to modify pages by placing crafted code in a parameter value, aka Bug ID CSCuy76517.
Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 6.0.0.1Cisco Firepower Management Center 5.4.0Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 5.4.1.1Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4.1.5Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 5.4.1.3
9
CVSSv2
CVE-2016-6433
The Threat Management Console in Cisco Firepower Management Center 5.2.0 up to and including 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.
Cisco Firepower Management Center 5.2.0Cisco Firepower Management Center 5.3.0Cisco Firepower Management Center 5.3.0.2Cisco Firepower Management Center 5.3.0.3Cisco Firepower Management Center 5.3.0.4Cisco Firepower Management Center 5.3.1Cisco Firepower Management Center 5.3.1.3Cisco Firepower Management Center 5.3.1.4Cisco Firepower Management Center 5.3.1.5Cisco Firepower Management Center 5.3.1.6Cisco Firepower Management Center 5.4.0Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 5.4.1.1Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4.1.3Cisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 5.4.1.5Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 6.0.1
4.3
CVSSv2
CVE-2016-6439
A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software prior to 6.0.1 could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerabi...
Cisco Firepower Management Center 5.4.1.5Cisco Firepower Management Center 5.3.1.3Cisco Firepower Management Center 5.3.1.4Cisco Firepower Management Center 5.3.0.2Cisco Firepower Management Center 5.3.0.4Cisco Firepower Management Center 5.4.1.1Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 5.3.0Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 5.3.1.5Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4 BaseCisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 5.3.1Cisco Firepower Management Center 5.3.0.3Cisco Firepower Management Center 5.3.1.6Cisco Firepower Management Center 6.0.0Cisco Firepower Management Center 6.0.0.1Cisco Firepower Management Center 6.0.0.0Cisco Firepower Management Center 5.4.1.3Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 6.0.1
3.5
CVSSv2
CVE-2017-6717
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. ...
Cisco Firepower Management Center 6.0.1.1Cisco Firepower Management Center 6.0.0.0Cisco Firepower Management Center 5.4.1.3Cisco Firepower Management Center 5.4 BaseCisco Firepower Management Center 6.0.1Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 5.4.1.9Cisco Firepower Management Center 6.2.0.2Cisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 6.0.0Cisco Firepower Management Center 6.0.0.1Cisco Firepower Management Center 5.4.0Cisco Firepower Management Center 5.4.1.1Cisco Firepower Management Center 5.4.1.5Cisco Firepower Management Center 6.2.0Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 6.1.0.2Cisco Firepower Management Center 6.1.0Cisco Firepower Management Center 6.0.1.3Cisco Firepower Management Center 6.0 Base
3.5
CVSSv2
CVE-2017-6716
A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower M...
Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 5.3.1.7Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4.1.5Cisco Firepower Management Center 5.4.0Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 5.4.1.9Cisco Firepower Management Center 5.4.1.3Cisco Firepower Management Center 5.4.1.1
3.5
CVSSv2
CVE-2017-6715
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote malicious user to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x ...
Cisco Firepower Management Center 5.4.1.4Cisco Firepower Management Center 5.4.1.2Cisco Firepower Management Center 5.4.0Cisco Firepower Management Center 5.4.1.6Cisco Firepower Management Center 5.4.1.1Cisco Firepower Management Center 5.4.0.2Cisco Firepower Management Center 5.4.1Cisco Firepower Management Center 5.4.1.3Cisco Firepower Management Center 5.4.1.5
5.8
CVSSv2
CVE-2016-6394
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software up to and including 6.1.0 allows remote malicious users to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
Cisco Firesight System Software 5.2.0.3Cisco Firesight System Software 5.2.0.4Cisco Firesight System Software 5.3.1.1Cisco Firesight System Software 6.0.0Cisco Firesight System Software 5.3.1.4Cisco Firesight System Software 5.4.0.1Cisco Firesight System Software 5.3.0.3Cisco Firesight System Software 5.3.0.4Cisco Firesight System Software 5.4.0.6Cisco Firesight System Software 5.2.0Cisco Firesight System Software 5.3.0Cisco Firesight System Software 5.3.0.1Cisco Firesight System Software 5.3.0.2Cisco Firesight System Software 5.3.1Cisco Firesight System Software 5.4.1.2Cisco Firesight System Software 5.4.1.3Cisco Firesight System Software 5.4.1.4Cisco Firesight System Software 6.0.0.1Cisco Firesight System Software 5.3.0.7Cisco Firesight System Software 5.4.0.2Cisco Firesight System Software 5.2.0.1Cisco Firesight System Software 5.2.0.2
5
CVSSv2
CVE-2016-6396
Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1, when certain malware blocking options are enabled, allow remote malicious users to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Cisco Firesight System Software 5.3.0Cisco Firesight System Software 5.1.0.1Cisco Firesight System Software 5.1.1.5Cisco Firesight System Software 5.1.1.6Cisco Firesight System Software 5.2.0.3Cisco Firesight System Software 5.2.0.4Cisco Firesight System Software 5.1.1Cisco Firesight System Software 5.1.1.1Cisco Firesight System Software 5.1.1.2Cisco Firesight System Software 5.1.1.10Cisco Firesight System Software 5.1.1.11Cisco Firesight System Software 5.3.0.1Cisco Firesight System Software 5.3.0.2Cisco Firesight System Software 5.4.1.2Cisco Firesight System Software 5.3.1.5Cisco Firesight System Software 5.4.1.4Cisco Firesight System Software 6.0.0.1Cisco Firesight System Software 5.4.0.2Cisco Firesight System Software 5.4.0.3Cisco Firesight System Software 5.3.1.1Cisco Firesight System Software 6.0.0Cisco Firesight System Software 5.4.0.1
3.5
CVSSv2
CVE-2016-6395
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz...
Cisco Firesight System Software 5.4.0.6Cisco Firesight System Software 5.3.0.4Cisco Firesight System Software 5.3.0.3Cisco Firesight System Software 5.3.1.4Cisco Firesight System Software 5.2.0.8Cisco Firesight System Software 5.3.1.1Cisco Firesight System Software 5.4.1Cisco Firesight System Software 5.2.0.3Cisco Firesight System Software 5.2.0.2Cisco Firesight System Software 5.2.0.1Cisco Firesight System Software 5.1.1.4Cisco Firesight System Software 5.1.1.3Cisco Firesight System Software 5.3.0Cisco Firesight System Software 5.2.0Cisco Firesight System Software 5.4.0.2Cisco Firesight System Software 5.3.0.7Cisco Firesight System Software 5.4.1.3Cisco Firesight System Software 5.4.0.4Cisco Firesight System Software 5.3.1Cisco Firesight System Software 5.3.1.3Cisco Firesight System Software 5.3.0.1Cisco Firesight System Software 5.2.0.6
6.8
CVSSv2
CVE-2016-6417
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 up to and including 6.1.0 and Firepower Management Center allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
Cisco Firesight System Software 4.10.2Cisco Firesight System Software 5.1.0Cisco Firesight System Software 4.10.2.4Cisco Firesight System Software 4.10.2.5Cisco Firesight System Software 4.10.3.7Cisco Firesight System Software 4.10.3.8Cisco Firesight System Software 5.1.1.2Cisco Firesight System Software 5.1.1.3Cisco Firesight System Software 5.1.1.11Cisco Firesight System Software 5.2.0.1Cisco Firesight System Software 5.3.0.2Cisco Firesight System Software 5.4.0Cisco Firesight System Software 5.4.1Cisco Firesight System Software 5.3.1.5Cisco Firesight System Software 5.2.0.8Cisco Firesight System Software 6.0.0.1Cisco Firesight System Software 6.0.1Cisco Firesight System Software 5.4.0.3Cisco Firesight System Software 5.4.0.5Cisco Firesight System Software 4.10.2.2Cisco Firesight System Software 4.10.2.3Cisco Firesight System Software 4.10.3.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook