CVE-2017-6716: XSS

Published Jul 4, 2017

Updated

A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6.

Affected Software

22 affected components

Cisco Secure Firewall Management Center=5.3.1.7

Cisco Secure Firewall Management Center=5.4.0

Cisco Secure Firewall Management Center=5.4.0.2

Cisco Secure Firewall Management Center=5.4.1

Cisco Secure Firewall Management Center=5.4.1.1

Cisco Secure Firewall Management Center=5.4.1.2

Cisco Secure Firewall Management Center=5.4.1.3

Cisco Secure Firewall Management Center=5.4.1.4

Cisco Secure Firewall Management Center=5.4.1.5

Cisco Secure Firewall Management Center=5.4.1.6

Cisco Secure Firewall Management Center=5.4.1.9

Cisco FirePOWER Management Center=5.3.1.7

Cisco FirePOWER Management Center=5.4.0

Cisco FirePOWER Management Center=5.4.0.2

Cisco FirePOWER Management Center=5.4.1

Cisco FirePOWER Management Center=5.4.1.1

Cisco FirePOWER Management Center=5.4.1.2

Cisco FirePOWER Management Center=5.4.1.3

Cisco FirePOWER Management Center=5.4.1.4

Cisco FirePOWER Management Center=5.4.1.5

Cisco FirePOWER Management Center=5.4.1.6

Cisco FirePOWER Management Center=5.4.1.9

Event History

Jul 4, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6716?

CVE-2017-6716 has a severity score of 6.1, indicating it is of medium severity.

How do I fix CVE-2017-6716?

To fix CVE-2017-6716, update to the latest version of Cisco Firepower Management Center Software as specified in the advisory.

What type of attack can CVE-2017-6716 allow?

CVE-2017-6716 could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack.

Which Cisco Firepower Management Center versions are affected by CVE-2017-6716?

Versions 5.3.1.7 and 5.4.0 through 5.4.1.9 of Cisco Firepower Management Center are affected by CVE-2017-6716.

Who is at risk due to CVE-2017-6716?

Users of the web interface of affected Cisco Firepower Management Center systems are at risk due to CVE-2017-6716.