CVE-2016-6365: Cisco Secure Firewall Management Center

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Cisco Firepower Management Center 4.10.3, 5.2.0, 5.3.0, 5.3.0.2, 5.3.1, and 5.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCur25508 and CSCur25518.

Affected products

• Cisco Secure Firewall Management Center: version 4.10.3 only; version 5.2.0 only; version 5.3.0 only; version 5.3.0.2 only; version 5.3.1 only; version 5.4.0 only

Published 2016-08-23. Last modified 2026-06-17.