Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wp3c-m2g9-hww6

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604.

The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604.

EPSS

Процентиль: 44%
0.00217
Низкий

Дефекты

CWE-20

Связанные уязвимости

nvd
около 10 лет назад

The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, aka Bug ID CSCux10604.

fstec
около 10 лет назад

Уязвимость операционной системы Cisco Firepower Extensible Operating System, позволяющая нарушителю разместить на странице вредоносные элементы и навязать пользователю их активацию

EPSS

Процентиль: 44%
0.00217
Низкий

Дефекты

CWE-20