Approved changes feed: RSS · Atom

cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\(1.160\):*:*:*:*:*:*:*

part: o version: 1.1(1.160) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductFirepower Extensible Operating System (98adda96-c575-56f9-818e-45e8147ea057)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-6435 vulnerable 2026-06-08 05:06:52.428946 Details available
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
Published: 2016-01-22T11:00:00.000Z
Updated: 2024-08-06T07:22:21.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6380 vulnerable 2026-06-08 05:06:52.226227 Details available
An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622.
Published: 2015-11-24T02:00:00.000Z
Updated: 2024-08-06T07:22:21.032Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6374 vulnerable 2026-06-08 05:06:52.218267 Details available
The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604.
Published: 2015-11-19T02:00:00.000Z
Updated: 2024-08-06T07:22:20.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6373 vulnerable 2026-06-08 05:06:52.218018 Details available
Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611.
Published: 2015-11-18T15:00:00.000Z
Updated: 2024-08-06T07:22:20.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6372 vulnerable 2026-06-08 05:06:52.217761 Details available
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to inject arbitrary web script or HTML via a crafted value, aka Bug ID CSCux10614.
Published: 2015-11-18T15:00:00.000Z
Updated: 2024-08-06T07:22:21.135Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6371 vulnerable 2026-06-08 05:06:52.217490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6370 vulnerable 2026-06-08 05:06:52.217214 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6369 vulnerable 2026-06-08 05:06:52.216927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6368 vulnerable 2026-06-08 05:06:52.216560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.