Cisco Security Advisories · November 2015 — Cisco Security Advisories
34 advisories 34 CVEs

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2015-11. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity).

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20151116-fmc

Cisco PSIRTPoC exploit2015-11-16

Cisco FireSIGHT Management Center Certificate Validation Vulnerability

CVEs:CVE-2015-6357

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205007 affected Cisco — —
Upstream advisory

cisco-sa-20151008-pca1

Cisco PSIRTPoC exploit2015-11-16

Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability

CVEs:CVE-2015-6330

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209582 affected Cisco — —
Upstream advisory

cisco-sa-20151104-aos

Cisco PSIRTEPSS <= 49%2015-11-04

Cisco AsyncOS TCP Flood Denial of Service Vulnerability

CVEs:CVE-2015-6321

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco — —
CVRFPID-189790 affected Cisco — —
CVRFPID-189791 affected Cisco — —
Upstream advisory

cisco-sa-20151104-esa2

Cisco PSIRTEPSS <= 49%2015-11-04

Cisco Email Security Appliance Email Scanner Denial of Service Vulnerability

CVEs:CVE-2015-6291

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189790 affected Cisco — —
Upstream advisory

cisco-sa-20151104-wsa2

Cisco PSIRTEPSS <= 49%2015-11-04

Cisco Web Security Appliance Range Request Denial of Service Vulnerability

CVEs:CVE-2015-6293

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco — —
Upstream advisory

cisco-sa-20151123-vts

Cisco PSIRTEPSS <= 49%2015-11-23

Cisco Virtual Topology System TCP Connection Functionality Denial of Service Vulnerability

CVEs:CVE-2015-6377

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-211903 affected Cisco — —
Upstream advisory

cisco-sa-20151112-vds

Cisco PSIRTEPSS <= 49%2015-11-13

Cisco Videoscape Distribution Suite Service Manager Information Disclosure Vulnerability

CVEs:CVE-2015-6364

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-211748 affected Cisco — —
Upstream advisory

cisco-sa-20151130-wsa

Cisco PSIRTEPSS <= 49%2015-11-30

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

CVEs:CVE-2015-6386

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco — —
Upstream advisory

cisco-sa-20151102-ucs

Cisco PSIRTEPSS <= 49%2015-11-02

Cisco Unified Computing System Blade Server Information Disclosure Vulnerability

CVEs:CVE-2015-6355

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112776 affected Cisco — —
Upstream advisory

cisco-sa-20151104-wsa

Cisco PSIRTEPSS <= 49%2015-11-04

Cisco Web Security Appliance Certificate Generation Command Injection Vulnerability

CVEs:CVE-2015-6298

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-189789 affected Cisco — —
Upstream advisory

cisco-sa-20151123-asa

Cisco PSIRTEPSS <= 49%2015-11-24

Cisco ASA Management Interface XML Parser Denial of Service Vulnerability

CVEs:CVE-2015-6379

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco — —
CVRFPID-108069 affected Cisco — —
CVRFPID-108072 affected Cisco — —
CVRFPID-108074 affected Cisco — —
CVRFPID-111872 affected Cisco — —
CVRFPID-112136 affected Cisco — —
CVRFPID-112137 affected Cisco — —
CVRFPID-112138 affected Cisco — —
CVRFPID-112140 affected Cisco — —
CVRFPID-112800 affected Cisco — —
CVRFPID-115208 affected Cisco — —
CVRFPID-115209 affected Cisco — —
CVRFPID-115210 affected Cisco — —
CVRFPID-115211 affected Cisco — —
CVRFPID-115212 affected Cisco — —
CVRFPID-115213 affected Cisco — —
CVRFPID-115214 affected Cisco — —
CVRFPID-115215 affected Cisco — —
CVRFPID-115216 affected Cisco — —
CVRFPID-115217 affected Cisco — —
CVRFPID-115218 affected Cisco — —
CVRFPID-115219 affected Cisco — —
CVRFPID-115220 affected Cisco — —
CVRFPID-115221 affected Cisco — —
CVRFPID-115222 affected Cisco — —
CVRFPID-115223 affected Cisco — —
CVRFPID-115224 affected Cisco — —
CVRFPID-115225 affected Cisco — —
CVRFPID-115226 affected Cisco — —
CVRFPID-115227 affected Cisco — —
CVRFPID-115228 affected Cisco — —
CVRFPID-115229 affected Cisco — —
CVRFPID-115230 affected Cisco — —
CVRFPID-115231 affected Cisco — —
CVRFPID-115232 affected Cisco — —
CVRFPID-115233 affected Cisco — —
CVRFPID-115234 affected Cisco — —
CVRFPID-115235 affected Cisco — —
CVRFPID-115236 affected Cisco — —
CVRFPID-115237 affected Cisco — —
CVRFPID-115238 affected Cisco — —
CVRFPID-115239 affected Cisco — —
CVRFPID-115240 affected Cisco — —
CVRFPID-115241 affected Cisco — —
CVRFPID-115242 affected Cisco — —
CVRFPID-115243 affected Cisco — —
CVRFPID-115244 affected Cisco — —
CVRFPID-115245 affected Cisco — —
CVRFPID-115246 affected Cisco — —
CVRFPID-115247 affected Cisco — —
CVRFPID-115248 affected Cisco — —
CVRFPID-115249 affected Cisco — —
CVRFPID-115250 affected Cisco — —
CVRFPID-115251 affected Cisco — —
CVRFPID-115252 affected Cisco — —
CVRFPID-115257 affected Cisco — —
CVRFPID-115258 affected Cisco — —
CVRFPID-115259 affected Cisco — —
CVRFPID-115260 affected Cisco — —
CVRFPID-115261 affected Cisco — —
CVRFPID-115262 affected Cisco — —
CVRFPID-115263 affected Cisco — —
CVRFPID-115268 affected Cisco — —
CVRFPID-115269 affected Cisco — —
CVRFPID-115270 affected Cisco — —
CVRFPID-115276 affected Cisco — —
CVRFPID-116857 affected Cisco — —
CVRFPID-185176 affected Cisco — —
CVRFPID-185177 affected Cisco — —
CVRFPID-185179 affected Cisco — —
CVRFPID-185180 affected Cisco — —
CVRFPID-185256 affected Cisco — —
CVRFPID-185257 affected Cisco — —
CVRFPID-185258 affected Cisco — —
CVRFPID-185259 affected Cisco — —
CVRFPID-185260 affected Cisco — —
CVRFPID-188865 affected Cisco — —
CVRFPID-188866 affected Cisco — —
CVRFPID-188867 affected Cisco — —
CVRFPID-191201 affected Cisco — —
CVRFPID-191202 affected Cisco — —
CVRFPID-191203 affected Cisco — —
CVRFPID-191206 affected Cisco — —
CVRFPID-191207 affected Cisco — —
CVRFPID-191208 affected Cisco — —
CVRFPID-191209 affected Cisco — —
CVRFPID-191210 affected Cisco — —
CVRFPID-191211 affected Cisco — —
CVRFPID-191212 affected Cisco — —
CVRFPID-191213 affected Cisco — —
CVRFPID-191214 affected Cisco — —
CVRFPID-194998 affected Cisco — —
CVRFPID-194999 affected Cisco — —
CVRFPID-195000 affected Cisco — —
CVRFPID-195001 affected Cisco — —
CVRFPID-195002 affected Cisco — —
CVRFPID-195003 affected Cisco — —
CVRFPID-195004 affected Cisco — —
CVRFPID-195005 affected Cisco — —
CVRFPID-195007 affected Cisco — —
CVRFPID-195008 affected Cisco — —
CVRFPID-195009 affected Cisco — —
CVRFPID-198551 affected Cisco — —
CVRFPID-198552 affected Cisco — —
CVRFPID-198553 affected Cisco — —
CVRFPID-198554 affected Cisco — —
CVRFPID-198555 affected Cisco — —
CVRFPID-198556 affected Cisco — —
CVRFPID-198557 affected Cisco — —
CVRFPID-198558 affected Cisco — —
CVRFPID-198559 affected Cisco — —
CVRFPID-198560 affected Cisco — —
CVRFPID-198561 affected Cisco — —
CVRFPID-198562 affected Cisco — —
CVRFPID-198565 affected Cisco — —
CVRFPID-198566 affected Cisco — —
CVRFPID-202938 affected Cisco — —
CVRFPID-202941 affected Cisco — —
CVRFPID-202942 affected Cisco — —
CVRFPID-202943 affected Cisco — —
CVRFPID-202945 affected Cisco — —
CVRFPID-202946 affected Cisco — —
CVRFPID-202947 affected Cisco — —
CVRFPID-202948 affected Cisco — —
CVRFPID-202949 affected Cisco — —
CVRFPID-202950 affected Cisco — —
CVRFPID-202951 affected Cisco — —
CVRFPID-202952 affected Cisco — —
CVRFPID-202953 affected Cisco — —
CVRFPID-202954 affected Cisco — —
CVRFPID-202955 affected Cisco — —
CVRFPID-202956 affected Cisco — —
CVRFPID-202959 affected Cisco — —
CVRFPID-202960 affected Cisco — —
CVRFPID-204544 affected Cisco — —
CVRFPID-206218 affected Cisco — —
CVRFPID-206491 affected Cisco — —
CVRFPID-206492 affected Cisco — —
CVRFPID-206493 affected Cisco — —
CVRFPID-206494 affected Cisco — —
CVRFPID-206495 affected Cisco — —
CVRFPID-206496 affected Cisco — —
CVRFPID-206497 affected Cisco — —
CVRFPID-206498 affected Cisco — —
CVRFPID-206501 affected Cisco — —
CVRFPID-206502 affected Cisco — —
CVRFPID-206503 affected Cisco — —
CVRFPID-206504 affected Cisco — —
CVRFPID-206505 affected Cisco — —
CVRFPID-207903 affected Cisco — —
CVRFPID-207904 affected Cisco — —
CVRFPID-207905 affected Cisco — —
CVRFPID-210982 affected Cisco — —
CVRFPID-210983 affected Cisco — —
CVRFPID-210984 affected Cisco — —
CVRFPID-210988 affected Cisco — —
CVRFPID-211051 affected Cisco — —
CVRFPID-211052 affected Cisco — —
CVRFPID-211059 affected Cisco — —
CVRFPID-211060 affected Cisco — —
CVRFPID-211528 affected Cisco — —
CVRFPID-70760 affected Cisco — —
CVRFPID-70761 affected Cisco — —
CVRFPID-70762 affected Cisco — —
CVRFPID-70763 affected Cisco — —
CVRFPID-70764 affected Cisco — —
CVRFPID-91003 affected Cisco — —
CVRFPID-91004 affected Cisco — —
CVRFPID-91005 affected Cisco — —
CVRFPID-91006 affected Cisco — —
CVRFPID-91009 affected Cisco — —
CVRFPID-91010 affected Cisco — —
CVRFPID-91011 affected Cisco — —
CVRFPID-91012 affected Cisco — —
CVRFPID-91013 affected Cisco — —
CVRFPID-91019 affected Cisco — —
CVRFPID-91020 affected Cisco — —
CVRFPID-91021 affected Cisco — —
CVRFPID-91022 affected Cisco — —
CVRFPID-91088 affected Cisco — —
CVRFPID-91089 affected Cisco — —
CVRFPID-91090 affected Cisco — —
CVRFPID-92319 affected Cisco — —
CVRFPID-92320 affected Cisco — —
CVRFPID-92321 affected Cisco — —
CVRFPID-92322 affected Cisco — —
CVRFPID-97260 affected Cisco — —
CVRFPID-97261 affected Cisco — —
CVRFPID-97262 affected Cisco — —
CVRFPID-99994 affected Cisco — —
CVRFPID-99996 affected Cisco — —
CVRFPID-99997 affected Cisco — —
Upstream advisory

cisco-sa-20151109-cg-nms

Cisco PSIRTEPSS <= 49%2015-11-09

Cisco Connected Grid Network Management System Privilege Escalation Vulnerability

CVEs:CVE-2015-6362

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-190474 affected Cisco — —
Upstream advisory

cisco-sa-20151125-ci

Cisco PSIRTEPSS <= 49%2015-11-25

Multiple Cisco Products Confidential Information Decryption Man-in-the-Middle Vulnerability

CVEs:CVE-2015-6358

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112731 affected Cisco — —
CVRFPID-183614 affected Cisco — —
CVRFPID-183630 affected Cisco — —
CVRFPID-211646 affected Cisco — —
CVRFPID-211649 affected Cisco — —
CVRFPID-211722 affected Cisco — —
CVRFPID-211726 affected Cisco — —
CVRFPID-211734 affected Cisco — —
CVRFPID-211738 affected Cisco — —
CVRFPID-98899 affected Cisco — —
Upstream advisory

cisco-sa-20151111-fmc

Cisco PSIRTEPSS <= 49%2015-11-11

Cisco FireSight Management Center Web Framework Cross-Site Scripting Vulnerability

CVEs:CVE-2015-6363

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-205007 affected Cisco — —
Upstream advisory

cisco-sa-20151120-tvcs

Cisco PSIRTEPSS <= 49%2015-11-20

Cisco TelePresence Video Communication Server Cross-Site Request Forgery Vulnerability

CVEs:CVE-2015-6376

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112250 affected Cisco — —
Upstream advisory

cisco-sa-20151116-fire1

Cisco PSIRTEPSS <= 49%2015-11-17

Cisco Firepower 9000 Command Injection at Management I/O Command-Line Interface Vulnerability

CVEs:CVE-2015-6370

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-209304 affected Cisco — —
Upstream advisory

cisco-sa-20151130-iosxe3s

Cisco PSIRTEPSS <= 49%2015-11-30

Cisco IOS XE 3S Platforms Series root Shell License Bypass Vulnerability

CVEs:CVE-2015-6383

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-184480 affected Cisco — —
CVRFPID-184481 affected Cisco — —
CVRFPID-194730 affected Cisco — —
CVRFPID-194731 affected Cisco — —
CVRFPID-194732 affected Cisco — —
CVRFPID-194735 affected Cisco — —
CVRFPID-194736 affected Cisco — —
CVRFPID-194737 affected Cisco — —
CVRFPID-194842 affected Cisco — —
CVRFPID-194843 affected Cisco — —
CVRFPID-198123 affected Cisco — —
CVRFPID-198124 affected Cisco — —
CVRFPID-198125 affected Cisco — —
CVRFPID-198535 affected Cisco — —
CVRFPID-200768 affected Cisco — —
CVRFPID-200770 affected Cisco — —
CVRFPID-200771 affected Cisco — —
CVRFPID-201495 affected Cisco — —
CVRFPID-202539 affected Cisco — —
CVRFPID-202540 affected Cisco — —
CVRFPID-202541 affected Cisco — —
CVRFPID-202542 affected Cisco — —
CVRFPID-202558 affected Cisco — —
CVRFPID-203353 affected Cisco — —
CVRFPID-206159 affected Cisco — —
CVRFPID-206160 affected Cisco — —
CVRFPID-206161 affected Cisco — —
CVRFPID-206162 affected Cisco — —
CVRFPID-206174 affected Cisco — —
CVRFPID-206175 affected Cisco — —
CVRFPID-206176 affected Cisco — —
CVRFPID-206178 affected Cisco — —
CVRFPID-206180 affected Cisco — —
CVRFPID-206181 affected Cisco — —
CVRFPID-206188 affected Cisco — —
CVRFPID-206189 affected Cisco — —
CVRFPID-206190 affected Cisco — —
CVRFPID-206191 affected Cisco — —
CVRFPID-206192 affected Cisco — —
CVRFPID-206193 affected Cisco — —
CVRFPID-207269 affected Cisco — —
CVRFPID-209961 affected Cisco — —
CVRFPID-210078 affected Cisco — —
CVRFPID-210079 affected Cisco — —
CVRFPID-210081 affected Cisco — —
Upstream advisory

cisco-sa-20151120-ns

Cisco PSIRTEPSS <= 49%2015-11-20

Cisco Networking Services Sensitive Information Disclosure Vulnerability

CVEs:CVE-2015-6375

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-2097 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.