How severe is CVE-2015-0706?

CVE-2015-0706 has a CVSS 2.0 base score of 5.8, rated medium severity.

Is CVE-2015-0706 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2015-0706?

CVE-2015-0706 primarily affects Cisco Firesight System Software. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2015-0706?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2015-0706 published?

CVE-2015-0706 was published on 2015-04-23 and last updated on 2026-06-17.

CVE-2015-0706

CVE-2015-0706 is a medium-severity vulnerability in Cisco Firesight System Software with a CVSS 2.0 base score of 5.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.8)
EPSS exploit prediction: 1% (62nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Cisco Firesight System Software
Published: 2015-04-23
Last modified: 2026-06-17

Description

Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.

Frequently asked questions

What is CVE-2015-0706?: Open redirect vulnerability in Cisco FireSIGHT System Software 5.3.1.1, 5.3.1.2, and 6.0.0 in FireSIGHT Management Center allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted HTTP header, aka Bug IDs CSCut06060, CSCut06056, and CSCus98966.
How severe is CVE-2015-0706?: CVE-2015-0706 has a CVSS 2.0 base score of 5.8, rated medium severity.
Is CVE-2015-0706 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2015-0706?: CVE-2015-0706 primarily affects Cisco Firesight System Software. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2015-0706?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2015-0706 published?: CVE-2015-0706 was published on 2015-04-23 and last updated on 2026-06-17.

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=38486

Affected products (3)

cpe:2.3:a:cisco:firesight_system_software:5.3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:5.3.1.2:*:*:*:*:*:*:*
cpe:2.3:a:cisco:firesight_system_software:6.0.0:*:*:*:*:*:*:*

More vulnerabilities in Cisco Firesight System Software

CVE-2016-6394 — Critical (CVSS 9.1): Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0…
CVE-2015-6335 — Critical (CVSS 9.0): The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote…
CVE-2016-6417 — High (CVSS 8.8): Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower…
CVE-2016-1394 — High (CVSS 8.6): Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain…
CVE-2017-6766 — High (CVSS 7.5): A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software…
CVE-2016-9193 — High (CVSS 7.5): A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco…

All CVEs affecting Cisco Firesight System Software →