cisco firesight system software

Name: cisco firesight system software
Brand: cisco

productUS

cpe:2.3:a:cisco:firesight_system_software:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

1critical10high19medium5low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-6357US	medium6.8	2.63% (85th)	Exploit	no fix	2015-11-18	7 versions
CVE-2015-6335US	high9.0	2.74% (86th)	—	no fix	2015-10-25	3 versions
CVE-2016-6471US	medium6.5	2.19% (82nd)	—	no fix	2016-12-14	= 5.4.1.6
CVE-2015-4302US	medium6.4	2.15% (82nd)	—	no fix	2015-08-19	= 5.3.1.4
CVE-2016-1463US	high7.5	2.11% (82nd)	—	no fix	2016-07-28	5 versions
CVE-2015-0739US	medium4.0	1.99% (81st)	—	no fix	2015-05-19	= 5.3.0
CVE-2016-9193US	high7.5	1.96% (80th)	—	no fix	2016-12-14	6 versions
CVE-2016-6420US	medium6.5	1.84% (79th)	—	no fix	2016-10-05	5 versions
CVE-2015-6427US	medium5.0	1.73% (78th)	—	no fix	2015-12-18	20 versions
CVE-2016-1368US	high7.5	1.65% (76th)	—	no fix	2016-05-05	28 versions
CVE-2015-0773US	medium5.5	1.59% (76th)	—	no fix	2015-06-12	2 versions
CVE-2016-6460US	high7.5	1.55% (75th)	—	no fix	2016-11-19	6 versions
CVE-2015-4270US	medium4.3	1.54% (75th)	—	no fix	2015-07-14	2 versions
CVE-2015-0737US	medium4.3	1.54% (75th)	—	no fix	2015-06-12	= 5.3.1.1
CVE-2015-0766US	medium4.3	1.54% (75th)	—	no fix	2015-06-04	= 6.0.0
CVE-2016-6394US	critical9.1	1.45% (73rd)	—	no fix	2016-09-12	38 versions
CVE-2016-1345US	high7.5	1.40% (72nd)	—	no fix	2016-04-01	14 versions
CVE-2017-6766US	high7.5	1.27% (70th)	—	no fix	2017-08-07	7 versions
CVE-2016-6396US	medium5.3	1.24% (69th)	—	no fix	2016-09-12	52 versions
CVE-2015-6419US	medium6.8	1.15% (67th)	—	no fix	2015-12-12	5 versions
CVE-2016-1294US	medium6.1	1.12% (66th)	—	no fix	2016-01-16	= 6.0.1
CVE-2016-1293US	medium6.1	1.12% (66th)	—	no fix	2016-01-16	2 versions
CVE-2016-6395US	medium5.4	1.10% (66th)	—	no fix	2016-09-12	52 versions
CVE-2015-6354US	low3.5	1.08% (65th)	—	no fix	2015-10-31	2 versions
CVE-2015-6353US	low3.5	1.08% (65th)	—	no fix	2015-10-31	7 versions
CVE-2015-0706US	medium5.8	1.07% (65th)	—	no fix	2015-04-23	3 versions
CVE-2015-6363US	low3.5	1.07% (65th)	—	no fix	2015-11-12	2 versions
CVE-2016-1394US	high8.6	1.01% (63rd)	—	no fix	2016-07-03	4 versions
CVE-2015-4242US	medium6.8	0.99% (62nd)	—	no fix	2015-07-08	2 versions
CVE-2016-1356US	low3.7	0.83% (57th)	—	no fix	2016-03-03	= _6.1.0
CVE-2015-0707US	low3.5	0.77% (55th)	—	no fix	2015-04-23	2 versions
CVE-2016-1355US	medium6.1	0.77% (55th)	—	no fix	2016-03-03	= 6.1.0
CVE-2016-6411US	high7.5	0.75% (55th)	—	no fix	2016-09-24	= 6.0.1
CVE-2016-6417US	high8.8	0.63% (50th)	—	no fix	2016-10-05	70 versions
CVE-2017-6735US	medium6.7	0.42% (36th)	—	no fix	2017-07-10	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')11 CVEs
CWE-20Improper Input Validation8 CVEs
CWE-264CWE-2645 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-254CWE-2542 CVEs
CWE-255CWE-2552 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan