CVE-2015-0766
Last modified
CVE-2015-0766 is a vulnerability of currently unknown severity. Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.. EPSS estimates a 1.55% chance of exploitation in the next 30 days.
Description
Multiple cross-site scripting (XSS) vulnerabilities in the administrative web interface in the Management Center component in Cisco FireSIGHT System Software 6.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified fields, aka Bug IDs CSCus93566, CSCut31557, and CSCut47196.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firesight System Software | 6.0.0 |
References
- http://www.securitytracker.com/id/1032482Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032482Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-0766?
How severe is CVE-2015-0766?
How do I fix CVE-2015-0766?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-0760The IKEv1 implementation in Cisco ASA Software 7.x, 8.0.x, 8…
- CVE-2015-0761Cisco AnyConnect Secure Mobility Client before 3.1(8009) and…
- CVE-2015-0762Cross-site scripting (XSS) vulnerability in the management i…
- CVE-2015-0763Cisco Unified MeetingPlace 8.6(1.2) does not properly valida…
- CVE-2015-0764Cisco Unified MeetingPlace 8.6(1.9) allows remote attackers …
- CVE-2015-0765Cisco ONS 15454 System Software 10.30 and 10.301 allows remo…
- CVE-2015-0767Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allo…
- CVE-2015-0768The Device Work Center (DWC) component in Cisco Prime Networ…
- CVE-2015-0769Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing S…
- CVE-2015-0770CRLF injection vulnerability in Cisco TelePresence TC 6.x be…
- CVE-2015-0771The IKE implementation in the WS-IPSEC-3 service module in C…
- CVE-2015-0772Cisco TelePresence Video Communication Server (VCS) X8.5RC4 …
Are you affected by CVE-2015-0766?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
