CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0773
https://notcve.org/view.php?id=CVE-2015-0773
12 Jun 2015 — Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified VPN deletion request in a management session, aka Bug ID CSCut67078. Cisco FireSIGHT System Software 5.3.1.3 y 6.0.0 permite a usuarios remotos autenticados eliminar el panel de control de un usuarios arbitrario a través de una solicitud de eliminación VPN modificada en una sesión de gestión, también conocida como Bug ID CSCut67078. • http://tools.cisco.com/security/center/viewAlert.x?alertId=39256 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2015-0766
https://notcve.org/view.php?id=CVE-2015-0766
04 Jun 2015 — Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196. Múltiples vulnerabilidades de XSS en la interfaz web administrativa en el componente Management Center en Cisco FireSIGHT System Software 6.0.0 permiten a atacantes remotos inyectar secuencias de comandos web a... • http://tools.cisco.com/security/center/viewAlert.x?alertId=39171 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.1EPSS: 0%CPEs: 10EXPL: 0CVE-2015-0739
https://notcve.org/view.php?id=CVE-2015-0739
19 May 2015 — The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938. La implementación Lights-Out Management (LOM) en Cisco FireSIGHT System Software 5.3.0 en los dispositivos Sourcefire 3D Sensor permite a usuarios remotos autenticados realizar subidas arbitrarias de ficheros de Baseboard Management Contr... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38905 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0706
https://notcve.org/view.php?id=CVE-2015-0706
23 Apr 2015 — Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966. Vulnerabilidad de la redirección abierta en Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, y 6.0.0 en FireSIGHT Management Center permite a atacantes remotos redirigir usuarios hacia sitios web arbitrarios y realiz... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38486 •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0707
https://notcve.org/view.php?id=CVE-2015-0707
23 Apr 2015 — Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425. Vulnerabilidad de XSS en Cisco FireSIGHT System Software 5.3.1.1 y 6.0.0 en FireSIGHT Management Center permite a usuarios remotos autenticados inyectar secuencias de comandos web arbitrarios o HTML a través de un parámetro no especificado, también conocido com... • http://tools.cisco.com/security/center/viewAlert.x?alertId=38487 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •