CyberSec.Space Logo
Back to CVE Browser

CVE-2015-6373

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.0010%
EPSS Percentile44.96th
PublishedNov 18, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611.

Affected Platforms (CPE)

💻
Cisco

Firepower Extensible Operating System

= 1.1\(1.160\)

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3

Related Vulnerabilities

CVE-2017-38838.6

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating ...

CVE-2015-63707.2

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows loca...

CVE-2015-63806.5

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices all...

CVE-2017-123296.3

A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenti...