CVE-2016-6394: Cisco Firesight System Software

Critical severity, CVSS 9.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software through 6.1.0 allows remote attackers to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

Affected products

• Cisco Firesight System Software: version 5.2.0 only; version 5.2.0.1 only; version 5.2.0.2 only; version 5.2.0.3 only; version 5.2.0.4 only; version 5.2.0.5 only; …

Published 2016-09-12. Last modified 2026-06-17.