CVE-2016-6394

—

CVSS 3.0

9.1 critical

EPSS

1%p72

Published

Sep 12, 2016 (Sep 12, 2016)

Modified

Jun 17, 2026

Description

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

Vendors: cisco
Products: firesight system software
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.