Security Advisory

CVE-2016-6395

5.4
MEDIUM

Vulnerability Description

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
Published Date September 12, 2016
Official Source NIST NVD Advisory