CVE-2015-4270

Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.5 and 6.0.0 allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCuv22557, CSCuv22583, CSCuv22632, CSCuv22641, CSCuv22650, CSCuv22662, CSCuv22697, and CSCuv22702.
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:firesight_system_software:5.3.1.5:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2015-07-14 17:59

Updated : 2024-02-04 18:53


NVD link : CVE-2015-4270

Mitre link : CVE-2015-4270

CVE.ORG link : CVE-2015-4270


JSON object : View

Products Affected

cisco

  • firesight_system_software
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')