CVE-2015-0707 – Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Softwa

Cross-site scripting (XSS) vulnerability in Cisco FireSIGHT System Software 5.3.1.1 and 6.0.0 in FireSIGHT Management Center allows remote authenticated users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCus85425.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0707

Reference (s):

• CISCO:20150422 Cisco FireSIGHT Management Center Web Framework Stored Cross-Site Scripting Vulnerability
• URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38487