First published: Tue Jul 04 2017(Updated: )
A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x and prior. More Information: CSCuy88951. Known Affected Releases: 5.4.1.6.
Credit: ykramarz@cisco.com ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Secure Firewall Management Center | =5.4.0 | |
Cisco Secure Firewall Management Center | =5.4.0.2 | |
Cisco Secure Firewall Management Center | =5.4.1 | |
Cisco Secure Firewall Management Center | =5.4.1.1 | |
Cisco Secure Firewall Management Center | =5.4.1.2 | |
Cisco Secure Firewall Management Center | =5.4.1.3 | |
Cisco Secure Firewall Management Center | =5.4.1.4 | |
Cisco Secure Firewall Management Center | =5.4.1.5 | |
Cisco Secure Firewall Management Center | =5.4.1.6 | |
Cisco Firepower Management Center Software | =5.4.0 | |
Cisco Firepower Management Center Software | =5.4.0.2 | |
Cisco Firepower Management Center Software | =5.4.1 | |
Cisco Firepower Management Center Software | =5.4.1.1 | |
Cisco Firepower Management Center Software | =5.4.1.2 | |
Cisco Firepower Management Center Software | =5.4.1.3 | |
Cisco Firepower Management Center Software | =5.4.1.4 | |
Cisco Firepower Management Center Software | =5.4.1.5 | |
Cisco Firepower Management Center Software | =5.4.1.6 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-6715 has a medium severity rating, highlighting its potential impact on the web interface of Cisco Firepower Management Center.
To mitigate CVE-2017-6715, upgrade to a fixed release of Cisco Firepower Management Center, specifically versions after 5.4.1.
CVE-2017-6715 affects authenticated users of Cisco Firepower Management Center versions 5.4.1.x and prior.
CVE-2017-6715 allows authenticated, remote attackers to conduct cross-site scripting (XSS) attacks.
No, CVE-2017-6715 requires an attacker to be authenticated to exploit the vulnerability.