Cisco Firesight System Software 5.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:firesight_system_software:5.4.0:*:*:*:*:*:*:*
part: a version: 5.4.0 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Firesight System Software (061f4265-5643-5821-a8b1-1786c31d9ec4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-6766 |
vulnerable | 2026-06-08 05:09:52.765892 |
Details available
A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected system. The vulnerability is due to unexpected interaction with Known Key and Decrypt and Resign configuration settings of SSL policies when the affected software receives unexpected SSL packet headers. An attacker could exploit this vulnerability by sending a crafted SSL packet through an affected device in a valid SSL session. A successful exploit could allow the attacker to bypass the SSL decryption and inspection policy for the affected system, which could allow traffic to flow through the system without being inspected. Cisco Bug IDs: CSCve12652.
Published: 2017-08-07T06:00:00.000Z
Updated: 2024-08-05T15:41:17.426Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6420 |
vulnerable | 2026-06-08 05:08:02.229068 |
Details available
Cisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote authenticated users to bypass authorization checks and gain privileges via a crafted HTTP request, aka Bug ID CSCur25467.
Published: 2016-10-05T10:00:00.000Z
Updated: 2024-08-06T01:29:20.022Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6417 |
vulnerable | 2026-06-08 05:08:02.219635 |
Details available
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
Published: 2016-10-05T17:00:00.000Z
Updated: 2024-08-06T01:29:20.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6396 |
vulnerable | 2026-06-08 05:08:02.121020 |
Details available
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.541Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6395 |
vulnerable | 2026-06-08 05:08:02.119464 |
Details available
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-6394 |
vulnerable | 2026-06-08 05:08:02.103520 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1463 |
vulnerable | 2026-06-08 05:07:31.472813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1368 |
vulnerable | 2026-06-08 05:07:28.018725 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-1345 |
vulnerable | 2026-06-08 05:07:27.850372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6427 |
vulnerable | 2026-06-08 05:06:52.406764 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6419 |
vulnerable | 2026-06-08 05:06:52.385563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6357 |
vulnerable | 2026-06-08 05:06:52.068931 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6353 |
vulnerable | 2026-06-08 05:06:52.057147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.