Cisco Firesight System Software 5.4.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:firesight_system_software:5.4.1:*:*:*:*:*:*:*

part: a version: 5.4.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductFiresight System Software (061f4265-5643-5821-a8b1-1786c31d9ec4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-6766 vulnerable 2026-06-08 05:09:52.766484 Details available
A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, 6.1.0, 6.2.0, 6.2.1, and 6.2.2 could allow an unauthenticated, remote attacker to bypass the SSL policy for decrypting and inspecting traffic on an affected system. The vulnerability is due to unexpected interaction with Known Key and Decrypt and Resign configuration settings of SSL policies when the affected software receives unexpected SSL packet headers. An attacker could exploit this vulnerability by sending a crafted SSL packet through an affected device in a valid SSL session. A successful exploit could allow the attacker to bypass the SSL decryption and inspection policy for the affected system, which could allow traffic to flow through the system without being inspected. Cisco Bug IDs: CSCve12652.
Published: 2017-08-07T06:00:00.000Z
Updated: 2024-08-05T15:41:17.426Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6417 vulnerable 2026-06-08 05:08:02.219753 Details available
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
Published: 2016-10-05T17:00:00.000Z
Updated: 2024-08-06T01:29:20.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6396 vulnerable 2026-06-08 05:08:02.121134 Details available
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6395 vulnerable 2026-06-08 05:08:02.119579 Details available
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6394 vulnerable 2026-06-08 05:08:02.107041 Details available
Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1345 vulnerable 2026-06-08 05:07:27.853870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6427 vulnerable 2026-06-08 05:06:52.406821 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6353 vulnerable 2026-06-08 05:06:52.058379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.