Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:firesight_system_software:6.0.1:*:*:*:*:*:*:*

part: a version: 6.0.1 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductFiresight System Software (061f4265-5643-5821-a8b1-1786c31d9ec4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-9193 vulnerable 2026-06-08 05:08:22.891691 Details available
A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. Affected Products: Cisco Firepower Management Center and FireSIGHT System Software are affected when they are configured to use a file policy that has the Block Malware action. More Information: CSCvb27494. Known Affected Releases: 6.0.1.1 6.1.0.
Published: 2016-12-14T00:37:00.000Z
Updated: 2024-08-06T02:42:11.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6417 vulnerable 2026-06-08 05:08:02.219851 Details available
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
Published: 2016-10-05T17:00:00.000Z
Updated: 2024-08-06T01:29:20.161Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6411 vulnerable 2026-06-08 05:08:02.197628 Details available
Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.
Published: 2016-09-24T01:00:00.000Z
Updated: 2024-08-06T01:29:20.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6396 vulnerable 2026-06-08 05:08:02.121233 Details available
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.541Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6395 vulnerable 2026-06-08 05:08:02.119679 Details available
Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz58658.
Published: 2016-09-12T10:00:00.000Z
Updated: 2024-08-06T01:29:19.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-6394 vulnerable 2026-06-08 05:08:02.110061 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1463 vulnerable 2026-06-08 05:07:31.472854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1394 vulnerable 2026-06-08 05:07:28.263472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1345 vulnerable 2026-06-08 05:07:27.856332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1294 vulnerable 2026-06-08 05:07:27.636688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1293 vulnerable 2026-06-08 05:07:27.636281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6427 vulnerable 2026-06-08 05:06:52.408541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-6363 vulnerable 2026-06-08 05:06:52.210500 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.