CVE-2016-6417

—

CVSS 3.0

8.8 high

EPSS

<1%p48

Published

Oct 5, 2016 (Oct 5, 2016)

Modified

Jun 17, 2026

Description

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.

Vendors: cisco
Products: firesight system software
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.