CVE-2016-1431: XSS
Published Jun 18, 2016
·Updated
Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCur25516.
Affected Software
10 affected components
Cisco Secure Firewall Management Center=4.10.3
Cisco Secure Firewall Management Center=5.2.0
Cisco Secure Firewall Management Center=5.3.0
Cisco Secure Firewall Management Center=5.3.1
Cisco Secure Firewall Management Center=5.4.0
Cisco FirePOWER Management Center=4.10.3
Cisco FirePOWER Management Center=5.2.0
Cisco FirePOWER Management Center=5.3.0
Cisco FirePOWER Management Center=5.3.1
Cisco FirePOWER Management Center=5.4.0
Event History
Jun 18, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:59 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-1431?
CVE-2016-1431 has a high severity rating, indicating that it poses a significant risk to affected systems.
2
How do I fix CVE-2016-1431?
To fix CVE-2016-1431, you should apply the latest security updates or patches provided by Cisco for the affected versions.
3
Which versions are affected by CVE-2016-1431?
The affected versions are Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0.
4
What type of vulnerability is CVE-2016-1431?
CVE-2016-1431 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2016-1431 be exploited remotely?
Yes, CVE-2016-1431 can be exploited remotely by attackers through crafted URLs.